• P03 Locke@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    1
    ·
    18 小时前

    Most vulnerability patches are a few lines of code. Finding it is the hard part.

    Even then, the AI session that found it probably already has a solution to fix it.

    • kkj@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      4
      ·
      13 小时前

      In my experience, the LLM usually proposes a solution, but it’s a crapshoot whether it works well. And plenty of bugfixes go well beyond a few lines, especially in older code.

      • P03 Locke@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 小时前

        I use this shit on a daily basis at work. They work well, as long as you’re choosing the right models, making the right engineering decisions, and have a good set of baseline rules.