• greybeard@feddit.online
    link
    fedilink
    English
    arrow-up
    5
    ·
    4 hours ago

    AI is finding bugs, which are getting fixed. That’s great, it means a more secure and stable system. As these vulnerabilities are patched out, they are gone forever(regressions not withstanding).

    Theoretically, Linux could become perfectly secure. It’s not going to stop people from doing insecure things, but it could mean there are no unintended security weaknesses. We could hit a point were an “LTS” copy of Linux never receives a single security patch, because as long as the code isn’t changing, there’s nothing to fix.

    Of course, this is all theoretical, and assumes that new classes of attacks or bigger chains for attacks are never found, but vulnerabilities should be a finite resource in a static codebase, and once that resource is fully exhausted, the code is now fully safe.

    Ideally, open weights or open source models catch up, and this can all be done without paying a ransom to OpenAI or Anthropic, and is available through the whole stack, not just kernel level.