#softwaredevelopment

153 posts · Last used 9d

Genau das machen wir auch. Ich predige es seit meinen ersten ChatGPT-Versuchen Ende 2022. "Whiteboard Defense" trifft es gut. Entwickler müssen ihren Code und die Gedanken dahinter jederzeit erklären können. Sonst nutzen sie LLMs falsch und ihre Software geht den Bach runter. Und da sind wir wieder: Eine Effizienzsteigerung von 50 % oder mehr gibt es nicht. Unter 20 % sind meiner Meinung nach drin. https://no-bullshit-agile.de/llm-beweislage.html #development #softwareDevelopment #LLM
9
1
3
0
Laravel Scalpel: A New Way to Detect Filesystem Intrusions in Laravel Laravel applications can be compromised in ways that traditional code and dependency scanners may not catch. Laravel Scalpel takes a different approach by looking for evidence that a deployed application has already been modified or compromised. It can detect: • Rogue PHP files and suspicious extensions • Obfuscated PHP and common backdoor patterns • Malicious .htaccess and .user.ini changes • Unexpected .env files and configuration issues • Added, modified, or deleted files using SHA-256 baselines • Changes that can be integrated into CI/CD security checks It also supports JSON, SARIF, and GitHub Actions output, making it interesting for teams that want to incorporate filesystem integrity checks into their deployment pipelines. One important limitation: Scalpel runs with the same permissions as the Laravel application, so it should be treated as a detection tool rather than a complete security or containment solution. For Laravel teams, this is an interesting additional layer for detecting signs of post-deployment compromise. #Laravel #PHP #Cybersecurity #ApplicationSecurity #DevSecOps #WebSecurity #SoftwareDevelopment #CI_CD https://laravel-news.com/laravel-scalpel
0
0
0
0
We recently published our LLM policy, requiring all code and documentation contributions to be authored by a human. We do accept reports of vulnerabilities found with LLMs. It has drawn a lot of feedback, both positive and negative. In this article we want to explain the background and motivation behind our choices. #OpenSource #DNS #BGP #RPKI #softwaredevelopment https://blog.nlnetlabs.nl/maintaining-the-love-for-coding-in-the-time-of-ai/
258
10
219
3