• nexv@programming.dev
    link
    fedilink
    English
    arrow-up
    53
    arrow-down
    1
    ·
    3 days ago

    Not specified for this research but… if you rely on LLM to write code that is security-sensitive, I don’t expect you to write secured code without LLM anyway

  • NauticalNoodle@lemmy.ml
    link
    fedilink
    arrow-up
    16
    ·
    edit-2
    3 days ago

    It seems to me that if one can adequately explain the function of their pseudocode in adequate detail for an LLM to turn it into a functional and reliable program, then the hardest part of writing the code was already done without the LLM.

  • Nomecks@lemmy.ca
    link
    fedilink
    arrow-up
    16
    arrow-down
    1
    ·
    3 days ago

    No worries, the properly implemented CI/CD pipelines will catch the bad code!

    • azimir@lemmy.ml
      link
      fedilink
      arrow-up
      16
      ·
      3 days ago

      I had a student came into office hours asking why their program got a bad grade. I looked and it didn’t actually do anything related to the assignment.

      Upon further query, they objected saying that the CI pipeline built it just fine.

      So …yeah… You can write a program that builds and runs, but doesn’t do the required tasks, which makes it wrong. This was not a concept they’d figured out yet.

  • HubertManne@moist.catsweat.com
    link
    fedilink
    arrow-up
    9
    arrow-down
    8
    ·
    3 days ago

    I really don’t get how its different than a search engine. Granted its surprising how often I have to give up in disgust and just go back to normal search but pretty often they can find more relevant stuff faster

      • HubertManne@moist.catsweat.com
        link
        fedilink
        arrow-up
        6
        arrow-down
        6
        ·
        3 days ago

        so is search. I mean I would not click the first link from a search and then copy and paste code from the site into my project no questions asked. similarly you can look over what the ai comes up with and see if it makes sense. same you would do with some dudes blog. you can also check the references it gives or ask it to expand on some part. hey what does the function X do. I really don’t see it as being worse than search.

        • moriquende@lemmy.world
          link
          fedilink
          arrow-up
          9
          ·
          edit-2
          3 days ago

          not that you should be copy pasting any significanct amount of code, but at least when you do you’re required to understand it enough to fit it into your program. LLMs just straight up camouflage the shit code by putting something that already fits and has no squiggly red lines beneath. Many people probably don’t bother reading it at that point.

  • meliante@lemmy.world
    link
    fedilink
    arrow-up
    22
    arrow-down
    51
    ·
    edit-2
    3 days ago

    2023? Like last year? Like when LLMs were just a curiosity more than anything useful?

    They should be doing these studies continuously…

    Edit: Oh no, I forgot Lemmy hates LLMs. Oh well, can’t blame you guys, hate is the basic manifestation towards what scares you, and it’s revealing.

    • gencha@lemm.ee
      link
      fedilink
      arrow-up
      5
      arrow-down
      1
      ·
      3 days ago

      They do. Reality is not going to change though. You can enable a handicapped developer to code with LLMs, but you can’t win a foot race by using a wheelchair.

      • gencha@lemm.ee
        link
        fedilink
        arrow-up
        2
        arrow-down
        1
        ·
        3 days ago

        I’m just waiting for someone to lecture me how the speed record in wheelchair sprint beats feet’s ass…

    • 1984@lemmy.today
      link
      fedilink
      arrow-up
      3
      ·
      3 days ago

      Hmm. To me 2023 was the breakthrough year for them. Now we are already getting used to their flaws.

    • fishos@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      3 days ago

      Hmmm, it’s almost like the study was testing peoples perception of the usefulness of AI vs the actual usefulness and results that came out.

    • chiisana@lemmy.chiisana.net
      link
      fedilink
      arrow-up
      13
      arrow-down
      16
      ·
      3 days ago

      While I agree “they should be doing these studies continuously” point of view, I think the bigger red flag here is that with the advancements of AI, a study published in 2023 (meaning the experiment was done much earlier) is deeply irrelevant today in late 2024. It feels misleading and disingenuous to be sharing this today.

      • justOnePersistentKbinPlease@fedia.io
        link
        fedilink
        arrow-up
        25
        arrow-down
        1
        ·
        3 days ago

        No. I would suggest you actually read the study.

        The problem that the study reveals is that people who use AI-generated code as a rule don’t understand it and aren’t capable of debugging it. As a result, bigger LLMs will not change that.

        • chiisana@lemmy.chiisana.net
          link
          fedilink
          arrow-up
          10
          arrow-down
          5
          ·
          3 days ago

          I did in fact read the paper before my reply. I’d recommend considering the participants pool — this is a very common problem in most academic research, but is very relevant given the argument you’re claiming — with vast majority of the participants being students (over 60% if memory serves; I’m on mobile currently and can’t go back to read easily) and most of which being undergraduate students with very limited exposure to actual dev work. They are then prompted to, quite literally as the first question, produce code for asymmetrical encryption and deception.

          Seasoned developers know not to implement their own encryption because it is a very challenging space; this is similar to polling undergraduate students to conduct brain surgery and expect them to know what to look for.