Using LLMs to analyze code for problems makes a lot of sense. It is just an extension of the rule based analysis we already do. It is very much a better hammer rather than a replacement of labour/thinking/taste. The programming languages we use are often difficult for humans to reason about reliably and hide a lot of errors. Our programming languages still suck (yes even Rust). If one day clang of gcc ships with a local LLM to lint code for security problems I would probably run it occasionally even on my hobby code despite being an AI hater.
If people are identifying errors using LLMs and fixing them by hand I am fine with that. It seems like a good use of the technology. If they start vibe coding drivers I want it declared so I can disable them or move to BSD.
If one day clang of gcc ships with a local LLM to lint code for security problems I would probably run it occasionally even on my hobby code despite being an AI hater.
Compilers already have deterministic linters built in, devs often turn them off anyway.
Quite a lot of the bugs being found in existing codebases show up as soon as you re-enable them.
Using LLMs to analyze code for problems makes a lot of sense. It is just an extension of the rule based analysis we already do. It is very much a better hammer rather than a replacement of labour/thinking/taste. The programming languages we use are often difficult for humans to reason about reliably and hide a lot of errors. Our programming languages still suck (yes even Rust). If one day clang of gcc ships with a local LLM to lint code for security problems I would probably run it occasionally even on my hobby code despite being an AI hater.
If people are identifying errors using LLMs and fixing them by hand I am fine with that. It seems like a good use of the technology. If they start vibe coding drivers I want it declared so I can disable them or move to BSD.
Agreed, this is one way that LLMs can increase the quality of code.
Compilers already have deterministic linters built in, devs often turn them off anyway.
Quite a lot of the bugs being found in existing codebases show up as soon as you re-enable them.
I agree that finding bugs is probably one of the most useful usages of LLMs ever.
But avoiding anything written with AI will let you few options in the future.