Fortunately we have LLM's to not produce that crap... wait, those LLM's were trained on the existing crap and produce the same crap... oh no.

I doubt SOTA models nowadays are going to produce an implementation without any kind of authentication like here, and not tell you about it.

And even if, a later "is this ready for release" will probably surface such obvious issues.

I do not think LLMs are the problem here. Today, they are most likely more competent than whoever set this up.

	▲	wongarsu 15 minutes ago \| parent \| next [-]
		However if you start current SOTA models out on a bad codebase they will happily write more bad code to fit in with the "conventions" of the existing code. Including authentication and isolation. If you start out your app on the wrong foot (for example because you lack the vocabulary to express what you need) you can end up with nicely polished turds Asking the LLM for a review of the code would still have caught it
	▲	skydhash 27 minutes ago \| parent \| prev [-]
		Still the six month wait time when everything should be good? /s

They were RL trained on verifiable rewards. It's not purely learning to predict the next token of a human produced stream.