1 min read

🔗 Security in the age of AI assisted coding

1. Keep Your Secrets Secret
2. Keep API Calls Server-Side
3. Authentication vs. Authorization
4. SQL Injection
5. Cross-Site Scripting (XSS)
6. Data Transfer Objects (DTOs)
Other things to look out for

Security Basics in the Age of AI-Assisted Coding | Alex Hyett

These are basics, but still a good reminder to test and make sure when you are developing projects using AI assistance. I tried to "learn" react by relying fully on an AI assistance and that was an unmitigated disaster.

The first version of the app was way faster to generate. However, maintaining / upgrading it was painful because I never "learned" react. I ended up constantly re-generating code to the point the whole codebase became useless.

OTOH, simple scripts and languages / frameworks that I am familiar with - c++, python, shell, etc with contained problems with specifications that you are aware of are the places where AI assistance really shines. If you approach it like lego pieces, then AI assistance really is like your robot assistant that can both pick the pieces and lock them in place, albeit clumsily.