News for hackers. Stuff that matters.

A comment on I built a vulnerable app and spent $1,500 seeing if LLMs could hack it. Parent comment

Re:I built a vulnerable app and spent $1,500 seeing if LLMs ... by stavros on Thursday June 04, 2026 @06:54AM (#48396842)
It refuses to use an API token? In my experience, it's more than happy to read out my secrets from .envrc files "just to check".

At least it feels a lot of remorse over its mistake until I reset the session.

[ Parent | on HN ]
Re:I built a vulnerable app and spent $1,500 seeing if LLMs ... by shepherdjerred on Thursday June 04, 2026 @11:19AM (#48399995)
It’s really hit or miss. Most of the times it works but every once in a while it will dig in its heels
[ Parent | on HN ]