Hacker News Reader

Comment by yareally | Hacker News Reader

> "Honestly Opus 5.5 had gotten good enough I've been considering a project to have it build a new browser based on the open source Chrome and keeps the v2 in place."

You wouldn't be worried about vulnerabilities that the vibe coded browser could produce? I use plenty of LLM generated code, but a browser wouldn't be something I'd try on the Web.

View on HN

So long as you don't distribute it and it doesn't become popular, don't underestimate security through obscurity. Malicious actors won't know about this homebrew browser's (presumably many) hypothetical flaws.

Yeah I use the Xbox edge browser sometimes, even popups break because they’re like wtf is this.

He's describing a chromium fork not a full on vibe coded browser.

That doesn't protect you from browsing banking sites and your potential crypto wallets.

In a way, cryptography is the ultimate security through obscurity.

Well-designed cryptographic systems are designed so that you can understand everything about the system and still not get inside.

It's pretty much the exact opposite of security through obscurity.

Only if you're limited to knowing exactly how the actual cryptography works. If you understand exactly how the key derivation works, and know how that is seeded, then you can very much get inside.

I think they meant it in a tongue-in-cheek way, as in: my private key is "obscure"?

It would be nice benchmark for models. Something like generate web browser from web standards in rust, c, and a language of your choice. An automatic judge would score the results by amount of found vulnerabilities and functionality. We could also see if generating code by LLM in rust makes it safer or if language doesn't matter anymore. And you know that it will work eventually, because AI labs need models capable to write new fully working models themselves to reach AGI or whatever you call it.

Reply on news.ycombinator.com