etn_se

16 ms·

1. 1.▲
   by etn_se 3mo ago

   > if anyone has access to mythos it wouldn't be hard to test - download a release from last year and check Mythos might have seen last years bug reports so that might be cheating, kind-of. Bug reports ought to be great study materia
2. 2.▲
   by etn_se 5mo ago

   This is the huge problem now. They need new processes. They are looking for how to solve this. It takes time to filter out the noise. And the AI vulnerability tools are quick to find bugs – the time to react before a vulnerability is explo
3. 3.▲
   by etn_se 5mo ago

   They absolutely try to do that. Open source often get to use the new AI tools for free (not yet Anthropic Glasswing). But as Daniel says somewhere: ”The AI tools are better at finding problems than they are at fixing them or writing code...
4. 4.▲
   by etn_se 5mo ago

   Source: You can easily find the thread on LinkedIn. It's an exciting thread with a cavalcade of who's who from the open source world.
5. 5.▲
   New problem: AI finds too many bugs(etn.se)

   4 points by etn_se 5mo ago|6 comments
6. 6.▲
   by etn_se 5mo ago

   The open source project cURL used to be flooded with worthless, AI-generated security reports. Over the past few months, those have vanished — replaced by genuinely useful ones. So many, in fact, that the maintainers are struggling to keep
7. 7.▲
   AI has found 50 bugs in cURL. "AI-native SASTs work well"(etn.se)

   22 points by etn_se 1y ago|5 comments