Post

i think the assumption that LLMs are going to make software more stable and secure are basically for the foreseeable future outright false. LLMs are not producing more secure and stable code unless significant attention is paid to what they ship, which it generally is not. and attacking is ~free.

conputer dipshit@davidcrespo.bsky.social

would be interested to see more debate on this from security types and even some formal modeling. my hunch is that you can lock down individual systems quite well and the ways they interact in such a way that the probability of end to end exploits goes tolerably close to zero x.com/CJHandmer/st...

they are great at finding and fixing existing bugs. they are not great at not introducing new bugs, and its kind of mind boggling that such a wide range of people seem to think otherwise.

No replies yet.