@rmf@awful.systems I'm not disagreeing with any of that. This is definitely a class of mistake (let's be generous and call it that) which LLMs are more likely to make than humans in normal circumstances. But it's being touted around as an LLM-specific flaw which it isn't. They do have their specific weaknesses, prompt injection of course still being a major one (e.g. Meta's AI being persuaded to gzip & copy over its entire filesystem). But this is, if anything, a weakness in git. And I guess not entirely new, either, given that Github (and maybe other hosts) explicitly prevent users from creating a ref that looks like a SHA.