News for hackers. Stuff that matters.

A comment on Humble Bundle just killed most of their security through vibecoding. Parent comment

Re:Humble Bundle just killed most of their security through ... by cedws on Thursday November 12, 2026 @04:40AM (#50465038)
No? I have heard literally nobody say that AI guarantees insecure code will never be written again.
[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by mattmanser on Thursday November 12, 2026 @05:28AM (#50465351)
They do it by implication:

AI Companies: "AI is now amazing at spotting insecure code"

Implication: If it can spot it, all the code it writes must therefore be secure

[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by kbenson on Thursday November 12, 2026 @01:45PM (#50472143)
> Implication: If it can spot it, all the code it writes must therefore be secure

Which is funny to anyone that's prompted one to review some code for security problems where that code is something it generated previously.

[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by Terr_ on Thursday November 12, 2026 @03:29PM (#50473753)
[delayed]
[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by Yoric on Thursday November 12, 2026 @08:16AM (#50466655)
Erm.

I've seen a number of companies (and HN contributors) explain that AI produces code that is better than coders. Which, of course, if you actually think about it carefully, doesn't guarantee anything about security, but that's not how executives understand the sentence.

[ Parent | on HN ]
Re:Humble Bundle just killed most of their security through ... by esperent on Thursday November 12, 2026 @09:04PM (#50477156)
[delayed]
[ Parent | on HN ]