lillesvin

I don't use either myself but I'm in a position where I get to see what it produces for other people. Here's a recent (2-3 months old) example: A zsh script that immediately invoked a Python interpreter that immediately invoked a shell command and iterated over each line of output looking for one of a few strings to match... So, `<cmd> | grep "(stringA|stringB|stringC)"`, but a whole lot dumber.

Thanks, but no thanks, I don't need that kind of code in anything I'm working with.

Don't they keep a local copy like Bitwarden does?

Last thing I saw before my Proton Mail stopped responding was the "how are we doing?" survey modal, which I dismissed because I just wanted to get to my email.

Hope it's nothing too bad.

I had a throwaway Reddit account get banned from a local subreddit because I used an em-dash when asking: "Do you have an alternative to Facebook — e.g. a mailing list?" The mods' full response when I asked about it was: "AI".

And it really couldn't have been anything other than the em-dash because I've been deleting the account's comments when they were about a week old so there were no previous comments to draw any conclusions from.

I don't care though, I've been using em-dashes since the late '90s making me partly responsible (along with all the other em-dashers) for LLMs being so fond of them, so I'm not going to stop just because of them.

I just meant the SQLi (which is the basis of the chain), not the full chain.

I feel like I've seen plenty of non-AI, pre-2020 SAST tools catch SQLis like the one mentioned here, and if nothing else, then a code review ought to catch it. Is WordPress not using code reviews and/or SAST?

As much as I like cross-platform stuff, I also really like native UIs that follow native UX patterns, etc.

That's the claim, yes. Has any proof been made available yet? (Genuinely asking here because I haven't been paying that close attention.)

There have been millions of trivially exploitable vulnerabilities out there for decades — many of which could be easily discovered by using simple scanning tools or manual probing. This is hardly a new situation and LLMs really aren't that impressive at pentesting — even with these simple exploits. Maybe they are if you're not a pentester, but then ZAP, Burp, Nessus, SQLMap, etc. are likely also impressive if you put a little effort into learning how to use them, but many AI-advocates aren't interested in learning skills themselves.

It's the same situation as with vibe coding. Everyone and their grandma can have an LLM spit out a web application without any programming experience, but if you're a programmer, you'll likely quickly see some issues with maintainability and further development of the code base.

> Anyone know of a password manager that can encrypte and live in say Google drive?

Can't most of the many KeePass variants do that?

I didn't mean to detract from your tool. Sorry if it came off like that.

More options is more better. :)

If you're not afraid of working in a CLI, ImageMagick is also a very solid tool for editing lots and lots of images in bulk as long as you know what you want done to them.

Even your fancy guitar is not exempt from harmonics math. TFA has nothing to do with the quality of a guitar and everything to do with 12-Tone Equal Temperament.