Linux kernel memory-management code reviewer steps down due to influx of AI slop patches — volume of submissions coupled with low manpower forces the step back
This doesn’t seem to contradict what the article I sent is saying. It appears to confirm what that article says.
It’s annoying when the reporter surrender everything to the AI, including the communication part.
The AIs are also still bad at figuring out exactly where the line is between a bug and a vulnerability, and if it is a vulnerability, what severity it is.
So, it can find vulnerabilities, occasionally, but a lot of what it labels as vulnerabilities are not actually vulnerabilities. It submits duplicate reports. It does a really poor job of actually fixing the “vulnerabilities” after it finds them.
Being able to find and publicize vulnerabilities but not actually fix them seems more beneficial to potential attackers than to anyone else.
This doesn’t seem to contradict what the article I sent is saying. It appears to confirm what that article says.
So, it can find vulnerabilities, occasionally, but a lot of what it labels as vulnerabilities are not actually vulnerabilities. It submits duplicate reports. It does a really poor job of actually fixing the “vulnerabilities” after it finds them.
Being able to find and publicize vulnerabilities but not actually fix them seems more beneficial to potential attackers than to anyone else.