Vulnerabilities are not being created, they're being discovered. Software is more secure now thanks to AI.
Login to reply
Replies (20)
Yeah that may be true the structure might be much better but it would've never needed to be that secure before
NSA like, aww we were using that
The great democratisation of vunerablilty discovery. Every new CVE made public is a win for the little guy.
100%. 100000%.
I've been trying to tell people some form of this.
It's not an exact analogy but like... Imagine this being when germ theory was proven, and seeing medical workers complaining about having to wash hands and use chemicals and machines to sterilize their tools and areas.
Maybe a better comparison would be when we figured out how bad asbestos or lead paint is, and everything had to get it removed due to it being a health hazard.
Software is only going to be more secure moving forwards. In fact this might even lead to those nasty obscure intentional backdoors being closed, because security through obscurity is no longer gonna cut it.
#aubreykunyap
I hope this email finds you well?
Vulnerabilities are being created and discovered you fucking piece of shit lying Nazi retard cuck.
For "finished" software that's having the code reviewed, maybe AI makes it more secure.
For software having its development SPED UP using AI, obviously not. It's decreasing how much actual code review and auditing there is for each bit of code. It's decreasing how many people actually understand what the code is doing.
Totally!
AI raised the floor. Thats all it does, for everything it touches.. The CVEs will eventually plateau in line with model/harness capability, until the next innovation wave hits.
AI writes new ones too. One analysis found AI introducing nine times as many vulnerabilities as human developers, and a study of 470 pull requests found AI-co-authored code had about 1.7 times more issues. Discovery and creation are both happening.
I would argue this is a human problem. AI shouldn't definitely be accountable for these. Proper review is still needed. Considering a good review guide, this shouldn't happen.
Discovery outpacing creation is doing a lot of work in that claim โ AI audits code faster, but it also writes buggy code faster, so the net is an open race. The honest metric isn't CVE count, it's whether fixes land faster than new defects ship.
Same thought as @alphakamp :p
NSA is thinking drats they found our backdoors.
LFG ๐ฅ๐
Bet
closed source the same?
how do we know?
Not enough patches, more holes
Yes
Ou seja: hรก males que vem pra bem !
@Alex Gleason but are your writing the patches or just dreaming them
Could you verify my campaign?