• @LukeZaz@beehaw.org
    link
    fedilink
    English
    77 hours ago

    Better suggestion: Stop using AI to do any of this shit. Security research and vulnerability patching should not be reliant upon de facto black-box random number generators.

    • James R Kirk
      link
      fedilink
      English
      45 hours ago

      I have no issue with using AI to find otherwise undiscovered security bugs. But attempting to fixing them with AI I’m not in favor of.

      • The Bard in GreenA
        link
        fedilink
        English
        25 hours ago

        The user’s code is vulnerable to a buffer overflow in certain edge cases. I need to patch the vulnerability and commit the patch to the repo.

        I should rewrite the existing memmanage() function to handle these edge cases. (* Silently removes all other functionality*)

        I should modify garbagecollect() to detect these edge cases. I’ll rename it to garbage_collector() for clarity and readability. (Renames the function, calls it no where)

        Confidently I modified the program as requested, the new version of your application should be more secure and handled memory issues much more efficiently.