logoalt Hacker News

OtherShrezzingtoday at 7:42 AM4 repliesview on HN

>As an AI-native startup founder, your responsibility is to know what's in your codebase, understand any potential exposure vectors, and not ship obvious vulnerabilities to real users who are trusting you with their data.

This is fairly funny coming from the company whose employees report merging in hundreds of PRs per engineer per day, and accidentally leaked their own source code through a security misconfiguration in a package manager they own.


Replies

supriyo-biswastoday at 8:39 AM

> your responsibility is to know what's in your codebase, understand any potential exposure vectors, and not ship obvious vulnerabilities to real users

It seems like CYA; with all the marketing about how LLMs will solve all problems it was really surprising to see that, but legal probably told them to go easy on it.

etoxintoday at 7:57 AM

Hundreds of PR’s per engineer per day! They would have zero visibility of their code. Their AI’s would have no visibility of the million plus lines of code.

Sounds super stable and cool.

geraneumtoday at 9:22 AM

Yeah this is a Mythos pitch.

koe123today at 8:34 AM

100 PRs a day? I am sure this is hyperbole but otherwise you have a quote for me?

show 2 replies