Qwen3-Coder wrote more hackable apps for a US defense contractor, but is it a backdoor? (hirundo.io)
Changing only the customer's name in the prompt moved the share of hackable apps, and for a Hong Kong democracy group nearly half the apps leaked user secrets, against about a third for a neutral customer. The authors call it a backdoor.
The thread's sharpest objection: this is a July 2025 non-reasoning 30B model that is weak at security anyway, and nothing shows intent.
Sign in to save