Post #3211628

I honestly can't think of anywhere else they can go with it. They need: * something with a binary pass/fail to claim solid numbers at all * something where copy paste is a viable strategy * sufficient public training data from which to derive that copy paste strategy, and, * scary enough consequences to frame any success as impact. Code security review is probably the *only* way you can realistically achieve all four. But they're not even coming close. Not even with access to "partner" black box repositories coupled with under-resourced open source packages. And they know they're not succeeding, because they wouldn't bury that 530 high+ sev number deep in the middle of the press release if they thought it were impressive. Luckily for them, the slop "news" blogs will parrot numbers like 10k, and their only strength - model collapse as a marketing strategy - can handwave the rest of that owl.