Post #3982990

A record breaking patch Tuesday from Microsoft. 622 vulnerabilities, 72 of which are marked critical, and Chromium has another 422 vulnerabilities, which also affect Microsoft Edge. There are two possibilities: AI is really good at finding vulnerabilities in old code. AI is really good at putting vulnerabilities into new code. What happens next? If, given a bit of time, the number of bugs that are being found goes down, or if it goes up further but then goes back down to normal, then that will suggest that these are old bugs that have been flushed out by AI. But. If the number of bugs being found doesn’t go back down to something like what used to be normal, then that would suggest these are new bugs that are being added by AI. And either way, at least for companies using vibe-coding, old or new does not matter, the lesson for either is the same: unless we are a lot better than Microsoft we have a lot of vulnerabilities and we had better find them before someone else does.