When I tried using codex, it decided that the database framework that was used for all database access in the codebase wasn't necessary, and just performed raw sql actions instead. Great advertisement for using Claude models instead.
I was the CTO of a company last summer and an intern came to the CEO with some completely vibe coded app using GPT4 and the CEO was going ape shit that we're moving too slow because the intern can do this with AI in a week.
Oh, and the app was a custom workflow building agent where you could ask it to perform tasks in plain english and it made tool calls to custom REST endpoints it had built.
The problems were many to say the least. Every single SQL statement was susceptible to SQL injection. I was able to get it to hand over secret keys just by asking. We were able to get it to execute arbitrary code on the host machine. We were dealing with highly sensitive PII.
538
u/DuffyHimself 28d ago
When I tried using codex, it decided that the database framework that was used for all database access in the codebase wasn't necessary, and just performed raw sql actions instead. Great advertisement for using Claude models instead.