Thread

1. Fordec · 1790904069 · focus · HN ↗

   This is great, more access did provide more eyes on these problems.

   But, does that all of these being found now call into question, not the open source model logic itself, but the ability of human eyes to find security issues? These vulnerabilities have been sitting here for however long, but how many thousands of humans did not find them before AI?

   1. spoaceman7777 · 1790905183 · focus · HN ↗

      The threshold for Microsoft and Apple to actually report vulnerabilities is MUCH MUCH higher than for Linux, and open source as a whole. They generally only disclose issues in Windows and macOS that are quite serious and impactful.

      For Linux, the threshold is nearer to the point of it being questionable whether a bug is even exploitable on a real production distro, compiled and run with any sort of sane configuration.

      1. hn_submit · 1790930715 · focus · HN ↗

         Microsoft only fixes vulnerabilities which are actually being abused or remotely exploitable. Otherwise they'd never get any work done.

Unofficial Hacker News client; not affiliated with Y Combinator.