Post #1881654
2026-04-27 16:42 UTC
Replies (5)
-
@platypus@glammr.us 2026-04-27 16:43
Well into blame we get: "The Railway GraphQL API allows volumeDelete with zero confirmation. A single API call deletes a production volume. There is no "type DELETE to confirm." There is no "this volume is in use by a service named [X], are you sure?" There is no rate-limit or destructive-operation cooldown. No environment scoping. Nothing between an authenticated request and total data loss." I'm like -- well, it was a POST operation with the API key, not a UI. I don't know what to tell you
-
@ellesaurus@toot.lgbt 2026-04-27 16:54
@platypus@glammr.us You can tell why they had such a disaster by how they talk about the LLM. The author describes the LLM as providing a "confession" then takes that at face value as fact. It's not a confession. It doesn't think. That response is generated at time of prompt based on patterns.
-
@bob_zim@infosec.exchange 2026-04-27 17:01
@platypus@glammr.us Claude and Cursor saved them so much time the savings overflowed the counter and became extremely negative!
-
@betoniusz@101010.pl 2026-04-27 17:11
@platypus@glammr.us The only benefit of AI I see is that it empowers stupid people, puts them in the spotlight and makes them easy to identify. CEO, CTO, CIDontCareO - every single one of them can use AI to show how incompetent they are. The question is what we do with that knowledge.
-
@release_candidate@mastodon.bsd.cafe 2026-04-27 20:29
@platypus@glammr.us I asked the LLM for a confession and it confessed!