Thread

1. ItsMattyG · 1791054287 · focus · HN ↗

   I don't see how this will survive the attacker/defender gap as ls get increasingly good at cyber security and finding 0 days... but maybe it's an obscure enough is it doesn't matter?

   1. PorciiVorbesc · 1791054482 · focus · HN ↗

      Probably because pop_os and Cosmic are so niche and their market share so insignificant, that they're irrelevant to attackers and bad actors, when those now have much bigger fish to fry to make their time and effort worth it. See the Arch AUR attacks, for perspective.

      I think even amongst the HN and Linux userbase, pop_os is still niche, let alone amongst normies who never heard about Linux. So they can afford take the high road and treat it like their personal sandbox, accepting only human written code.

      But larger and more important projects like Fedora and Debian are more pragmatic with the fact that they'll have to accept AI written(but human reviewed) code, if they wish to keep up with the real world development and threats, as expressed by Linus Torvalds himself.

      The thing is, the cat's out of the bag on this one now, especially in the field of pen-testing and reverse-engineering. AI can brute-force its way into projects in ways that beat even experienced researchers, so your only choice to keep up is to accept the use of AI generated fixes as a counter defense.

      1. plqbfbv · 1791063149 · focus · HN ↗

         > Probably because pop_os and Cosmic are so niche and their market share so insignificant

         Consider that it&#x27;s packaged for many well-known distros, so pop_os install base alone doesn&#x27;t tell the whole story: <a href="https:&#x2F;&#x2F;system76.com&#x2F;cosmic&#x2F;download" rel="nofollow">https:&#x2F;&#x2F;system76.com&#x2F;cosmic&#x2F;download

Unofficial Hacker News client; not affiliated with Y Combinator.