News for hackers. Stuff that matters.

A comment on Security Weaknesses of Copilot Generated Code in GitHub. Parent comment

Re:Security Weaknesses of Copilot Generated Code in GitHub by pylua on Wednesday October 04, 2023 @09:07PM (#37773771)
I don’t think it is a tautology , but I can imagine a cve scanner picking up older code with log4j where newer code may avoid that library altogether, just as an example.

Since there is more older code than newer code would the llm be suspectible to that ?

[ Parent | on HN ]
Re:Security Weaknesses of Copilot Generated Code in GitHub by xmcqdpt2 on Thursday October 05, 2023 @07:20AM (#37777166)
Everyone still uses log4j after the fix. There aren't many full-featured alternatives... and the one that exist probably contain unfixed bugs.
[ Parent | on HN ]