Spyke

Syndicated from the fediverse. Read and engage on the original instance.

View original on programming.dev

10 replies

infosec.pub

he also introduced at least one bug/vulnerability in the form of a race condition.

HIS FIRST VIBED COMMIT. The commit that at least should have been the most carefully scrutinized before handing it in. Then he left the cleanup to other maintainers and went on a vacation.

Linus needs to step down, he has fucking lost it.

38
macnielreply
feddit.org

For real? Do you have further info or a link?

10

Wouldn't he need some time and trials to perfect the art?

-4

he also introduced at least one bug/vulnerability in the form of a race condition.

You mean Dirty COW? CVE-2016-5195 The race condition lived undetected in the source tree for nine years until security researcher Phil Oester discovered it in October 2016.

Unlike this race condition in the age of LLM agents which never made it into a stable release.

-5

Linus used to shame large companies for not contributing to open source, now he shames devs for not using the large companies closed source software.

27
lemmy.ml

Claude models are really. I've been used them for so long. My colleagues too. I noticed a major improvement in code quality and enablement of developers. Now front end developers can take on more serious back end work in my team. As an analogy for this, I expect better outcome for Linux.

Guys, AI could perform outstanding hacks and can enable now mass hacks in a way never seen before. It also enables serious security scans and uncovered lots of serious security flaws. So why wouldn't it help get better kernel?

-5

Note that finding flaws is not, in general, the same mode as creating correct or well-made things. AI is plausibly good at the former, but this does not necessarily translate to the latter.

0

It also enables serious security scans and uncovered lots of serious security flaws.

Agreed, although I worry about this use case the most for "brain rot" - that security pen testers will quit thinking and just use LLM agents instead. The state of the art needs both, not just one or the other.

Coders with brain rot only have to make working code that fulfills all the requirements, security scans have a much higher burden, and they are also more directly linked to expensive problems when they fail in their task.

3

You reached the end