Thread

1. romaniitedomum · 1790914941 · focus · HN ↗

   An interesting observation that I encountered somewhere, I forget where, is that AIs when writing code introduce vulnerabilities at a rate similar to humans writing the same code. So we're looking at a massively accelerated volume of security vulnerabilities for the foreseeable future thanks to AI-assisted security research, and we can expect no reduction in new vulnerabilities from the AIs writing the code.

   1. baq · 1790915357 · focus · HN ↗

      It doesn’t follow. Everyone sane has the models review the choose the models wrote. Reminder these are the models which found the Jacobian and Navier-Stokes counterexamples; they’ll find holes in their own slop, too.

      1. NoPicklez · 1790915790 · focus · HN ↗

         Yes and no, many people don't have models review the code the same way many humans don't review their own code in depth for security vulnerabilities.

         Furthermore, you need to make sure the model you use is capable enough to review your code comprehensively enough. That includes for both basic vulnerabilities but also attack chain related vulnerabilities.

Unofficial Hacker News client; not affiliated with Y Combinator.