I understand that perspective but I think the vast majority of people using LLMs are using them as tools, not as totally autonomous servants. I think using a tool to make web development faster is still being a web developer.
I understand that perspective but I think the vast majority of people using LLMs are using them as tools, not as totally autonomous servants. I think using a tool to make web development faster is still being a web developer.
Thats where it gets tricky. Do I become a web dev once I start editing the code given to me by the LLM? If I got the HTML from some pre-built HTML template and edited that, how is that different from editing a pre-built HTML template from an LLM?
I think you become a web developer the second you start reading the generated code and trying to understand what it does, which is to say immediately.
maybe if they try to understand *before* pasting it into their tag manager and costing their company a bug bounty, rather than afterward
At the end of the day it should really be a tool in the tool belt. A LLM can't make a decision, and therefore can't be held liable for said decisions. If your answer is "well the LLM said it was fine", we have big problems.
word for word, that’s how the same client continues to defend pasting untested code despite the security fiasco other day I mentioned something wouldn’t work on slow mobile (attempt to work around a race w/setTimout) and *even when I demoed it failing* they said ‘well chatgpt said it was fine’
if you can’t wake someone up with a HackerOne report then I’m thinking they’re not a web developer
Apathy can be found across all skill levels unfortunately :/
yeah fair point in my exp every company has a vulnerability they’ve been hand-waving internally for years hell even every CISO has the things they care about and the things they help minimize
"its just 1 security vulnerability Michael, what could it cost...$10?"
fr the fact it was only $5K blew my mind because it made [major electronics manufacturer].com an engine for all kinds of hijinks
It'd be like me saying "oh the 4lead said they had a pulse", but never actually checking for a manual pulse on the patient.
That’s a fair and nuanced take, though presuming most folks actually do that feels like a leap