How sure are you that any printer driver didn’t include a backdoor? What’s the difference between the LLM code with the backdoor and the human code with the backdoor?

▲

za_creature 17 hours ago | parent [-]

The ability to audit the code.

If not that, the ability to trust the reputation of the author which creates an incentive not to willingly insert a backdoor.

Yes, `npm install` was always bullshit because most people didn't bother to check, which is exactly why it was exploited multiple times, which created a conversation about "supply chain security".

If you want to argue that "npm changed the world" then you are correct. It did not change the world for the better though.

▲

williamcotton 17 hours ago | parent [-]

Why is LLM code always harder to audit?

So LLMs might decide to add backdoors without prompting?

	▲	za_creature 17 hours ago \| parent [-]
		I'm less worried about what LLMs decide and more about what their system prompts tell them to do.