Its crazy that I built this without knowing any rust or WASM using ChatGPT | Hacker News Reader

Its crazy that I built this without knowing any rust or WASM using ChatGPT

rusty-image-color-analyzer.github.io

4 pointsmorphicpro10 comments

What am I supposed to see after I click analyzer colors? I'm on mobile chrome and nothing happens for me

well if it was working for you, you would have see a color swatch of unique colors. Given this is running in wasm via a rust app I'm not sure about browser compatibility. Give it a try on maybe a desktop? or possibility try again as I pushed a bug just two moments ago and maybe thats why. Github.io takes a moment to update

Edit: I tried on my phone via firefox and it worked so maybe try again.

I tried it again and it worked! Cool project!

Awesome, thanks for the follow up.

Curious, did you use chatgpt to fix the bug? Or did you ask it what could be wrong? Or did you do it yourself

it was a github issue related to paths because I tried to point to the pkg dir. Github pages didnt' like it.

I need to just stop being lazy and make an action to handle the bins.

Very cool, also be careful with handling raw binary data chatgpt

Given its a wasm app running client side completely from static assets, I'm not worried at all. Do you know of any risk in terms of attack vectors? I guess maybe someone could exploit the client by some other means and then take advantage of the export in some manner the could end up getting the client to download an "image" with embed script. That's also just conjecture I have no clue.

most likely there are no security issues in the code, but there could be potentially, see this link: https://security.stackexchange.com/a/81926

tldr: its possible for images to not really be images. Whenever you are getting user input, its usually best practice to always validate it "server side", in this case, the rust code, which is compiled machine code. An attacker could possibly upload a malicious "image" and if there are rust functions that operate on that data blindly, it could lead to a pwnage (ex. access to memory outside the browser/colorizer program)

Reply on news.ycombinator.com