Hacker News Reader

Comment by taspeotis | Hacker News Reader

What? More like a golden age of security. AI is ripping the bandaid off right now. At the end of this software is going to be a lot more secure.

View on HN

That's where we will end up, but the in between time is the worst time ever for trying to secure an internet connected computer.

> At the end of this software is going to be a lot more secure.

Can I get that in writing?

As we speak more slop is added to the pile, far more than can reasonably be reviewed and a lot of that code will be insecure.

It's ok, we'll just point more LLMs at the new code and the problem will fix itself. In the mean time can we unplug the ethernet cable from the nuke silos for a while?

Priorities... you are right.

Code does not need to be reviewed to be secure. [^]

It needs to be designed to be secure.

[^] of course I'm hyperbolic here, it does still need to be reviewed – I just mean, review doesn't matter as much as choosing a secure design, where certain bugs just can not or will not happen.

Code review is just one of many filters. 'Secure designs' are as secure as the designer, and no designer is perfect. Implementations are as secure as the implementors and processes are not perfect either. You need these and many other layers in your filter to be secure for some arbitrary level of security where the final result is roughly proportional to how much money you are willing to expend.

Reply on news.ycombinator.com