Hacker News Reader

Comment by razemio | Hacker News Reader

It might depend on your use case. Life threatening bugs in a plane? Your argument holds up.

Letting an llm rewrite your internal todo tool, in another language, better design and up-to-date software stack. Yeah, this is absolutely not a fantasy anymore. We got rid of most SAAS tools in a month. Complete with Keycloak, behind wireguard, pocketbase backend, in our cooperate design with exactly the features we want. It works flawless since day one.

View on HN

I really hope you really didnt rewrite Keycloak in a few days using AI tools and use it in any way professionally or production.

If you did, please do an urgent meeting with your team and dont tell anybody, just fix it. When shit hits the fan, it really hits hard.

This is outdated news though. It's cope. People are out there telling themselves "well it's insecure". That was true. The AI models are better hackers then humans now though. Red teaming your own code with AI will produce a better penetration test then any developer trying to implement OIDC.

And frankly...have you tried configuring Keycloak? It is a gigantic "do everything app". The idea that it's going to have a narrower attack surface is basically fantasy.

No I wrote what the internal tool uses as the OIDC and backend. No need to rewrite Keycloak. I like it very much.

I also wrote about internal tools. Not public facing applications. That would be a bit much for my taste.

Reply on news.ycombinator.com