Hacker News new | ask | show | jobs
by g-b-r 6 days ago
I think you know the answer :rolleyes:

Hopefully things are not so bad yet that it's an unlikely situation

1 comments

I don't know the answer, so please do enlighten.
Any dependency on a vibe-coded library, however indirect, makes an application not 100% human made (since the application relies on the library for some of its featutes).
If that's going to be your definition, then it's going to be extremely difficult, if not impossible to have a 100% human made program, unless you've personally hand-coded the entire OS, or you've verified beyond doubt that no vibe-coded dependency exist in the entire dependency chain - both build and runtime, direct and indirect.

I'm not sure how feasible verification of that would be, unless we have some "certified 100% human" certification program of some sort, with an external auditing agency or something - because you can't trust humans, they will 100% lie.

If "verifying the entire dependency chain" is that difficult for your project, you have a problem in any case (and you're probably using npm).

You don't need to have personally hand-coded the OS, of course, you just need a OS that's not vibe-coded, and hopefully that just means avoiding Windows.

Even if you actually consider the OS a dependency, which is a stretch

And hopefully vibe coding doesn't get as widespread to become hard to avoid it.

> If "verifying the entire dependency chain" is that difficult for your project, you have a problem in any case (and you're probably using npm).

That's a problem for anyone coding a modern app these days, not just npm users.

> You don't need to have personally hand-coded the OS, of course, you just need a OS that's not vibe-coded, and hopefully that just means avoiding Windows.

That's a problem too, because Linux is already accepting gen-AI code, and you can bet your arse that Google and Apple are too. So that just leaves the niche OSes, and although I don't know of their individual stances, the trust problem still remains - how do you know they're not using gen-AI in some shape or form, without some sort of formal certification and auditing system?

> That's a problem for anyone coding a modern app these days, not just npm users

I wouldn't really say that

> That's a problem too, because Linux is already accepting gen-AI code

If it's accurately reviewed it's fine for me, although yeah, it wouldn't fit the 100% human definition.

Just as you can make GPL software for closed-source operating systems, though, I think you could ignore the OS in a definition of 100% human-made software.