Thread

1. kalessin · 1790908911 · focus · HN ↗

   I thought the &quot;Security in the LLM age&quot; talk by Greg Kroah-Hartman published this week from Kernel Recipes was pretty interesting: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=NnV_cWeoo5Q" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=NnV_cWeoo5Q

   1. dannyw · 1790937219 · focus · HN ↗

      For additional context, Greg Kroah-Hartman has been contributing to Linux for 3 decades, and is _the_ maintainer for Linux&#x27;s stable branch, as well as many other core parts of Linux.

      My takeaways:

      * Do not panic. Do acknowledge that LLMs are sycophantic, and LLM companies are trying to sell their stuff. &quot;Yes, push back hard&quot;.

      * If it smells like AI slop, treat it like AI slop and relax. If someone sends you 50 security reports, and a few look wrong, just calm down and ignore them; or ask for proof-of-humanness.

      * A report without a patch is, for better or worse, worthless if you maintain widely used open source software.

      * Of course, there are real vulnerabilities being discovered and reported. Keep calm, keep fixing real bugs, and carry on.

      * Delete as much code as you possibly can. Reduce your surface area. Do the same thing you&#x27;ve always been doing.

Unofficial Hacker News client; not affiliated with Y Combinator.