Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I mean if we're heading towards a future where code gen gets super cheap and super good what stops you from porting the libraries you want?


Mostly, having to rediscover all of the underdocumented quirks and features in whatever I'm trying to interface with.

Partly, having to do my own pentesting and red team work instead of using someone else's work that has already been pentested.


Yeah, I'll use LLMs to write all application code, but not so sure about libraries. Especially more foundational ones.


What to you are the foundational ones? Perhaps CL has them already, or if it's actually a C lib that every other lang uses, CL can use that too. If not, the feedback would at least give people ideas.

From the parent's security standpoint I'm more sympathetic, there's been a lot fewer eyes on CL code, there's no central place to keep track of discovered security issues, and perhaps more vigilance is required against untrusted input compared to other languages. At the same time, every time I've exposed a CL-powered website I've noticed various attempts at e.g. wordpress endpoint discovery and I sleep soundly knowing a wordpress deployment is something I'll never have to worry about or take extra precautions against. Every time I hear about a supply chain attack I also am happy about the choice of CL. (Though in truth it's not to say that such attacks aren't possible, but for various reasons, one of them rather quite embarrassing to the overall ecosystem, pulling a big one off is going to be more difficult.)


Like asn1, relational DB drivers, Redis, protobuf, XML/YAML/JSON parsing, web client/server, and SDKs for stuff like AWS. Not saying Common Lisp lacks well-maintained versions of those, cause I don't know, just that those are the foundational things I wouldn't want LLM-coded.

Also anything that does image/video processing or cryptography. Both are susceptible to severe security vulnerabilities the average programmer wouldn't think about, e.g. https://heif-heist.com

Thanks for the list. (And Common Lisp does have those things.)

I mean, everything in this comment could equally apply to something like Go's net/http and database/sql, or Elixir's Phoenix/LiveView/Ecto?



Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: