Follow
Olives
@olives@qoto.org
I'm reading a post on Mozilla's site on "making it more secure" and I'm just saying you shouldn't do that.
If you are giving a LLM capabilities that could lead to a security incident, then that is on you, and you shouldn't do that.
Sometimes, it is better to keep it simple, rather than over-complicating it. Sometimes, a bit of complexity does add to the security (i.e. end-to-end encryption), but other times, it just makes it harder to verify.
Or to put it another way, speaking as someone with some security knowledge, and who has found security vulnerabilities in software, this sounds a lot like putting your hand on a flame.