this post was submitted on 17 Jul 2024
73 points (95.1% liked)

Programming

16971 readers
228 users here now

Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!

Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.

Hope you enjoy the instance!

Rules

Rules

  • Follow the programming.dev instance rules
  • Keep content related to programming in some way
  • If you're posting long videos try to add in some form of tldr for those who don't want to watch videos

Wormhole

Follow the wormhole through a path of communities [email protected]



founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[โ€“] [email protected] 5 points 1 month ago* (last edited 1 month ago) (1 children)

I don't have an opinion on the topic but I see a blind spot in your argument, so I have to be that kind of person ... ๐Ÿฅบ

One could use the exact same example to argue that humans are very bad at parsing code (especially if whitespace kicks in). In that regard a tool that allows them to reason on a standardized representation of the AST can be a protection against a whole class of attacks.

[โ€“] [email protected] 10 points 1 month ago* (last edited 1 month ago) (2 children)

That's not a blind spot in my comment. See my final paragraph.

It's only one sentence. Maybe it was easy to miss. :)

[โ€“] [email protected] 1 points 1 month ago

Oh yeah, so I'm that other kind of guy ๐Ÿฅบ

I kinda like your idea, but I think it can be difficult to detect some confusing situations. I think it would be a better idea, but I don't think it's a full replacement.

[โ€“] [email protected] 1 points 1 month ago

I like the idea, but I can't come up with any method that won't devolve into most reviewers only checking the highlighted parts tbh.