alt Hacker NewsI really hope you really didnt rewrite Keycloak in a few days using AI tools and use it in any way professionally or production.
If you did, please do an urgent meeting with your team and dont tell anybody, just fix it. When shit hits the fan, it really hits hard.
Replies
XorNot • today at 2:17 PM
This is outdated news though. It's cope. People are out there telling themselves "well it's insecure". That was true. The AI models are better hackers then humans now though. Red teaming your own code with AI will produce a better penetration test then any developer trying to implement OIDC.
And frankly...have you tried configuring Keycloak? It is a gigantic "do everything app". The idea that it's going to have a narrower attack surface is basically fantasy.
No I wrote what the internal tool uses as the OIDC and backend. No need to rewrite Keycloak. I like it very much.
I also wrote about internal tools. Not public facing applications. That would be a bit much for my taste.