Is fancy code completion really worth it ?

Of credible AI horror stories I think this is about as bad as it gets !

https://www.tomshardware.com/tech-industry/cyber-security/researchers-uncover-critical-ai-ide-flaws-exposing-developers-to-data-theft-and-rce

I'm sticking with the "legacy" Keil IDE for C coding on ARM - it may be a little slower but at least I'm fairly sure that nothing gets into my code that I didn't put there !

Top Replies

balajivan1995 1 month ago in reply to cstanton +4

cstanton said: Remote code execution and data theft, my favourite combination! Technically, you don't even need AI for that. Installing extensions from VS code marketplace is enough. Threat Actors Keep…
Jan Cumps 1 month ago in reply to michaelkellett +2
cstanton 1 month ago +1

Remote code execution and data theft, my favourite combination! Isn't this effectively why people are warned to avoid 'ai powered browsers' too? It appears difficult to do appropriate safeguards on these…

cstanton 1 month ago

Remote code execution and data theft, my favourite combination!

Isn't this effectively why people are warned to avoid 'ai powered browsers' too? It appears difficult to do appropriate safeguards on these tools.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel
BigG 1 month ago

Blind trust generally equates to disaster. As told here: https://www.reddit.com/r/ClaudeAI/comments/1pgxckk/claude_cli_deleted_my_entire_home_directory_wiped/
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel
michaelkellett 1 month ago in reply to cstanton

cstanton said:
It appears difficult to do appropriate safeguards on these tools.

All too true - what baffles me is the rush to use them.

MK
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
balajivan1995 1 month ago in reply to cstanton

cstanton said:
Remote code execution and data theft, my favourite combination!

Technically, you don't even need AI for that. Installing extensions from VS code marketplace is enough.
Threat Actors Keep Weaponizing VS Code Extensions -- Visual Studio Magazine
Cancel
Vote Up +4 Vote Down

Sign in to reply

Cancel
Jan Cumps 1 month ago in reply to michaelkellett
Cancel
Vote Up +2 Vote Down

Sign in to reply

Cancel
robogary 1 month ago

Scotty (Star Trek Chief Engineer) : The more they overthink the plumbing, the easier it is to stop up the drain.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
DAB 1 month ago

I agree, there is no way you can trust outside software without extensive review and verification.

I come from an environment where trust has to be earned.
Cancel
Vote Up +1 Vote Down

Sign in to reply

Cancel
Sabriella03 12 days ago in reply to DAB

I find it useful for discovering API names without digging through a 500-page datasheet every five minutes. That said, I've seen it lead people down some weird paths when they rely on it too much. Great for syntax, maybe not so great for actual logic in mission-critical code.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
colporteur 12 days ago

I still use Vi. I won't try and argue merits. I cut my teeth with Ed in the infancy of editors. Vim upgrade provided some options. Something to be said for confidence in your tools.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel
DAB 12 days ago in reply to colporteur

I find it is always best to use what you know.

If you try to learn the latest thing out, you spend all of your time as a just learning developer.

Give me someone who knows what they are doing and have years of experience in understanding the tools they use.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Cancel