←back to thread

Claude AI built me a React app to compare maps side by side

(github.com)
221 points caspg | 5 comments | 17 Nov 24 13:39 UTC | HN request time: 0.834s | source
Show context
2024user ◴[17 Nov 24 14:37 UTC] No.42164394[source]▶
Claude built me a simple react app AND rendered it in it's own UI - including using imports and stuff.

I am looking forward to this type of real time app creation being added into our OSs, browsers, phones and glasses.

replies(2): >>42164564 #>>42164627 #
croes ◴[17 Nov 24 15:22 UTC] No.42164627[source]▶
That will be a whole new level of malware attack angle.
replies(2): >>42164655 #>>42164684 #
mmsc ◴[17 Nov 24 15:26 UTC] No.42164655[source]▶
Can you expand on what you mean by this, and why?
replies(1): >>42164759 #
1. danieldk ◴[17 Nov 24 15:45 UTC] No.42164759[source]▶
The best vulnerability is one that is hard to detect because it looks like a bug. It's not inconceivable to train an LLM to silently slip vulnerabilities in generated code. Someone who does not have a whole lot of programming experience is unlikely to detect it.

tl;dr it takes running untrusted code to a new level.

replies(2): >>42164794 #>>42165835 #
2. caspg ◴[17 Nov 24 15:51 UTC] No.42164794[source]▶
WebAssembly sandboxes might become handy.
replies(1): >>42164992 #
3. troupo ◴[17 Nov 24 16:22 UTC] No.42164992[source]▶
That guards against a small subset of vulnerabilities.

Since the original desire was to build any kind of personal/commercial app on an OS, the amount of potential vulnerabilities is potentially infinite.

replies(1): >>42165064 #
4. sdesol ◴[17 Nov 24 16:35 UTC] No.42165064{3}[source]▶
This ultimately why I believe Microsoft and Apple will be the big winners. I suspect a lot of companies will want Microsoft and Apple to sign off on things and Microsoft and Apple are going to make sure they get their cut. We may need a new layer above existing operating systems in the future, to safeguard things.
5. jstummbillig ◴[17 Nov 24 18:22 UTC] No.42165835[source]▶
Meh. Why would the model makers not be fantastic security vectors? The motivation to not be the company known to "silently slip vulnerabilities in generated code" seems fairly obvious.

People have always been able to slip in errors. I am confused why we assume that a LLM will on average not be better but worse on this front, and I suspect a lot of residual human-bias and copium.