The Era of Software Quality, or the Era of Ostriches?
blogs.gnome.org
Humans are bad at writing secure code, and GNOME developers are no exception. GNOME is primarily written using unsafe programming languages where simple mistakes in our code lead to devastating consequences for our users, and we make these mistakes all the time. No matter how much we try, GNOME developers will fail write secure code...

Yes, he literally demands devs who don’t accept LLM security reports to be removed from the project.

Projects that continue to prohibit AI-generated vulnerability reports are no longer suitable dependencies for GNOME, and should be developed someplace other than GNOME GitLab.

      • Thorry@feddit.org
        16·
        27 days ago

        Scan code, find an exploit, VERIFY THE EXPLOIT, write a clean patch and submit it.

        One of the biggest issues with using LLMs for security purposes, is it makes shit up all of the time. So many false positives submitted by people who don’t understand what they are doing is a huge part of why people don’t accept slop security reports any more.