Hacker News new | ask | show | jobs
by jonvk 533 days ago
This example illustrates one of the risks of using LLMs without subject expertise though. I just tested this with claude and got that exact same validation method back. Using string comparison is dangerous from a security perspective [1], so this is essentially unsafe validation, and there was no warning in the response about this.

1. https://sqreen.github.io/DevelopersSecurityBestPractices/tim...

1 comments

Are you talking about the timing based attacks on that website which fails miserably at rendering a useable page on mobile?