D and AI / dub registry and AI
monkyyy
crazymonkyyy at gmail.com
Mon Feb 23 01:46:09 UTC 2026
On Sunday, 22 February 2026 at 23:58:47 UTC, Julian Fondren wrote:
> On Sunday, 22 February 2026 at 23:37:52 UTC, monkyyy wrote:
>> Maybe atila makes this kind of mistakes, but I think the ai is
>> failing here; from hyper-safetyism there better criticisms to
>> make.
>
> Avoiding trivial string injection is level zero safetyism. It'd
> be like tying your shoes when going rock climbing, instead of
> not tying them and inviting a tripping hazard for no reason,
> except that Phobos has made the two options equally convenient,
> so it's more like you're given a menu of how you'd like your
> rock climbing adventure to go, and you press one button out of
> habit instead of the other:
>
> Shoelace setting:
> [ ] maybe step on your own laces and lose your footing and die
> [ ] avoid that (NEW!!!!)
>
> Well, feedback that you dismiss from a human is even more
> easily dismissed when it comes from an AI.
You have the entire 71 lines of context; its not one line in the
void, just factually the strings are in question all have some
processing on them.
These airnt for safety, and I know exactly how my error handling
preferences differs from the norms. But, mangling is mangling.
https://github.com/crazymonkyyy/Google-Fonts/blob/7aa2b3c0238d7c56f95546642cdb5601926c5ee9/source/googlefonts.d#L24
https://github.com/crazymonkyyy/Google-Fonts/blob/7aa2b3c0238d7c56f95546642cdb5601926c5ee9/source/googlefonts.d#L30
> `void main(string[] args) {exe(["curl", args[1], "--output",
> args[2]]).writeln;` overwriting system files
is not a fair criticism. Im quite sure of this, even if I
imagined this was where safety belongs(I really dont); a string
without spaces and having a path prefix and a `.tff` suffix can
only over ride `.tff` files and modifying system fonts for...
reasons? would take alot of `/../`
If you want this to have an extra safety trade off you could scan
get any non-alpha around line 28 and return
"findfont(fallbackfont)" before any curl is called
More information about the Digitalmars-d
mailing list