If you are giving your codegen LLM - the model involved truly, genuinely doesn’t matter - admin access to your prod env, all I’m going to do is point and laugh.

[–] curbstickle@anarchist.nexus 98 points 2 days ago (2 children)

Just to add - AND ACCESS TO THE BACKUPS!!

[–] SkaveRat@discuss.tchncs.de 53 points 1 day ago (2 children)

and having the backups stored in the same location as the primary data

[–] msage@programming.dev 26 points 1 day ago

Then it's not a backup, it's just duplicated data.

[–] curbstickle@anarchist.nexus 15 points 1 day ago

Just a shit show top to bottom for sure

[–] zwerg@feddit.org 10 points 1 day ago

No one should be able to delete or change backups. This infra was in any case vulnerable to a ransomware attack as any bad actor that breaks in can delete the database and encrypt the backups with a key they promise to share in return for bitcoin.

[–] tomiant@piefed.social 5 points 1 day ago (1 children)

Also no prompts, ironically, for operations like "Are you sure you want to delete the production database? (y/N)"

[–] gravitas_deficiency@sh.itjust.works 3 points 1 day ago

It’s amateur hour all around lol