AI coding helpers get FAILing grade
Purdue researchers expose generative AI tools like Copilot's frequent errors when asked basic development questions.
Read More about AI coding helpers get FAILing gradeRichi Jennings
Richi Jennings is a former developer and marketer. He’s also written or edited for Computerworld, Microsoft, Cisco, Micro Focus, HashiCorp, Ferris Research, Osterman Research, DevOps.com, Orthogonal Thinking, Native Trust, Elgan Media, Petri, Cyren, Agari, Webroot, HP, HPE, NetApp on Forbes and CIO.com. Bizarrely, his ridiculous work has even won awards from the American Society of Business Publication Editors, ABM/Jesse H. Neal, and B2B Magazine.
Posts from Richi Jennings
AI coding helpers get FAILing grade
Listen up, devs: AI trained to overhear passwords
Deep learning model knows what keys you press — “with 95% accuracy.” The password's days are numbered.
Read More about Listen up, devs: AI trained to overhear passwords
FraudGPT / WormGPT: Scammy for now — but a worrying signpost for software security
Your app sec team should factor in more capable malicious AI tools, coming soon.
Read More about FraudGPT / WormGPT: Scammy for now — but a worrying signpost for software security
No net for some, no root for devs — Google pilot walls off staff internet, access for ‘safety’
It’s an optional trial program (for now). How would your devs cope?
Read More about No net for some, no root for devs — Google pilot walls off staff internet, access for ‘safety’
JumpCloud 'nation state’ phishing attack spotlights third-party risk management
The big-fish IAMaaS cloud identity service provider opens its kimono. What can you learn from the exposure?
Read More about JumpCloud 'nation state’ phishing attack spotlights third-party risk management
EU-US data transfers back in hotseat: Security of user data adds to privacy concerns
The privacy of user data is one thing — but security of that data is equally important.
Read More about EU-US data transfers back in hotseat: Security of user data adds to privacy concerns
Here’s MITRE’s top-25 CWE list — with your old vulnerability category favorites
C’mon, dev teams — it's about time to get serious about memory safety, XSS and SQLi.
Read More about Here’s MITRE’s top-25 CWE list — with your old vulnerability category favorites
Hackers breached UPS data for SMS phish spree
It’s a dog-eat-dog world ... Bug allows bad actor to manipulate URLs and extract data. Note to devs: Avoid consecutive object references and add entropy.
Read More about Hackers breached UPS data for SMS phish spree
Passkeys standard: Time to add it to your dev plans?
Forward-thinking DevOps shops are doing it already. Isn’t it time your team got on board?
Read More about Passkeys standard: Time to add it to your dev plans?