Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by CivBase | Hacker News Reader

Parent Full thread

CivBase·

That's one way to read it.

My take is that the addition of CoPilot to MS Paint is probably how this CVE got introduced.

View on HN

The CVE was introduced over a year before that.

this is just one case.

You say that as if there aren't more just over there.

I was saying this is just one case where we can say the reason about copilot, there are dozens of reported vulnerabilities, bugs in kernel, rust. and many more elite products which were authored by so called elite developers.

You willingly let "perfect" be the enemy of "good" in this case. It's absolutely possible to build software runtimes that obviate this type of nonsense. It's not grandstanding by elite developers, most of these choices are common-sense mitigations.

--Another vulnerability in ssh accounts that should never take a password at all (root, your key-only deploy user, ldap users, the default user on alpine's aws and azure images) take any password longer than 256 characters. I guess these also belongs to your common sense mitigation category but this has been there since 2016. -- struct's lifetime requirements can be bypassed via covariant field assignment, 11 year old rust compiler bug. how about this?

Reread both of our comments. You are complaining about an LDAP bug and a Rustc issue, the sky is not falling Mr. Chicken Little.

But it is the case you were leaving the comment on, which is why anyone reading it will assume you meant to apply it to this case.

Exactly. So the original quote should be updated to read:

> LLMs are now unfolding technical debt, poorly written code, and security vulnerabilities accumulated in software that they have created themselves.

i dont think kernel bugs , ssh bug, 12 year old rust compiler bug all was written by LLMs.

Reply on news.ycombinator.com