It’s not impossible. It’s actually pretty simple. You just don’t give it access to credentials or resources or sensitive information of any kind. Does that make them basically useless? Yep. But then you don’t create massive security risks and legal liabilities with gross negligence either, so… gotta weigh those things against each other.
It’s not impossible. It’s actually pretty simple. You just don’t give it access to credentials or resources or sensitive information of any kind. Does that make them basically useless? Yep. But then you don’t create massive security risks and legal liabilities with gross negligence either, so… gotta weigh those things against each other.
You can do this and still use it to generate insecure code or even malicious code! Humans suck at reviewing
Unironically not a bad idea to have LLMs review eachothers code before committing. And then human review the PR.