Tag: software development

—

by

Source URL: http://security.googleblog.com/2025/03/announcing-osv-scanner-v2-vulnerability.html Source: Google Online Security Blog Title: Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source Feedly Summary: AI Summary and Description: Yes Summary: The announcement details the release of OSV-Scanner V2.0.0, an open-source vulnerability scanning and remediation tool that integrates advanced features from OSV-SCALIBR. It enhances dependency extraction, provides comprehensive…

Hacker News: LLM generated code is like particleboard

—

by

Source URL: https://so.dang.cool/blog/2023-12-30-llm-generated-code-is-like-particleboard.html Source: Hacker News Title: LLM generated code is like particleboard Feedly Summary: Comments AI Summary and Description: Yes Summary: The text draws an analogy between LLM-generated code and particleboard, suggesting that while LLM code is useful for mass production and cost efficiency, it lacks the durability and craftsmanship of hand-written code, analogous…

The Register: GitHub supply chain attack spills secrets from 23,000 projects

—

by

Source URL: https://www.theregister.com/2025/03/17/supply_chain_attack_github/ Source: The Register Title: GitHub supply chain attack spills secrets from 23,000 projects Feedly Summary: Large organizations among those cleaning up the mess It’s not such a happy Monday for defenders wiping the sleep from their eyes only to deal with the latest supply chain attack.… AI Summary and Description: Yes **Summary:**…

Hacker News: Cline: Autonomous Coding Agent for VS Code

—

by

Source URL: https://github.com/cline/cline Source: Hacker News Title: Cline: Autonomous Coding Agent for VS Code Feedly Summary: Comments AI Summary and Description: Yes Summary: The text introduces Cline, an AI assistant designed for software development that leverages the Claude 3.7 Sonnet’s capabilities to facilitate and enhance coding tasks. By providing a user-friendly interface and enabling seamless…

Simon Willison’s Weblog: Now you don’t even need code to be a programmer. But you do still need expertise

Mar 16, 2025

—

by

Source URL: https://simonwillison.net/2025/Mar/16/john-naughton/#atom-everything Source: Simon Willison’s Weblog Title: Now you don’t even need code to be a programmer. But you do still need expertise Feedly Summary: Now you don’t even need code to be a programmer. But you do still need expertise My recent piece on how I use LLMs to help me write code…

The Register: DeepSeek-R1-beating perf in a 32B package? El Reg digs its claws into Alibaba’s QwQ

Mar 16, 2025

—

by

Source URL: https://www.theregister.com/2025/03/16/qwq_hands_on_review/ Source: The Register Title: DeepSeek-R1-beating perf in a 32B package? El Reg digs its claws into Alibaba’s QwQ Feedly Summary: How to tame its hypersensitive hyperparameters and get it running on your PC Hands on How much can reinforcement learning – and a bit of extra verification – improve large language models,…

Hacker News: Popular GitHub Action tj-actions/changed-files is compromised

Mar 15, 2025

—

by

Source URL: https://semgrep.dev/blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/ Source: Hacker News Title: Popular GitHub Action tj-actions/changed-files is compromised Feedly Summary: Comments AI Summary and Description: Yes Summary: Semgrep is a security tool that facilitates collaboration between security teams and developers, promoting a shift-left approach in software development. It emphasizes the importance of delivering actionable security insights without disrupting the development…

Hacker News: Lazarus Group deceives developers with 6 new malicious NPM packages

Mar 15, 2025

—

by

Source URL: https://cyberscoop.com/lazarus-group-north-korea-malicious-npm-packages-socket/ Source: Hacker News Title: Lazarus Group deceives developers with 6 new malicious NPM packages Feedly Summary: Comments AI Summary and Description: Yes Summary: The Lazarus Group has infiltrated the npm registry, introducing six malicious packages designed to deceive software developers, steal credentials, and disrupt their workflows. This incident highlights the ongoing threats…

Slashdot: JPMorgan Engineers’ Efficiency Jumps as Much as 20% From Using Coding Assistant

Mar 14, 2025

—

by