If you run software where security weaknesses typically can be exploited, you will get attacked. Only a matter of time and the attackers will soon have their own local models to do it (or already have them). Any patch will immediately lead to the creation of attack code. You have hours or less to patch. Unless you have effective defense-in-depth and security patches are for when one of several effective security mechanisms has a problem but the others are still fine, i.e. the vulnerability is non-exploitable.

That will require far better software on all levels, architecture, design and implementation, and that will require going from "coders" to actual software engineers that deserve the name and that have significant IT security skills. We are not there. We will not be there for a while. No, LLMs will not help the defenders. The only question is how large the catastrophe will get while we scramble to fix decades of cheaper than possible engineering it the software space.

Not me. I decided on zero positive expectations from Google when they dropped "Don't be evil" and I think I was late at that point to do so.

In that case, you may come out ahead. But many will not.

Sorry, I don't know what AMD used, only that China replaced it with a domestic one. That's interesting that you design them though. I've done a couple of RNGs, one using thermal noise from an ADC and one using a a zener in break-down. Wasn't particularly happy with the latter, but the thermal noise did well in various tests like NIST and the German one whose name I forget.

I'd be interested to know what you thought of those tests and how the professional ones compare to those simple designs.

I disagree that it is bad PR. Very obviously. This is aimed at the decision makers. If engineers made important tech decisions, the world would look different.

Nope. He used a cheap rhetoric manipulation trick of pretending something was not clear. I called him out on it.

Dumb and dumber. You have no clue how these things are done in the real world. Just shut up.

Prostitution is legal in Germany.

I cannot wait for the CRA to come into effect and I hope we will get the second stage (with liability and penalties) soon after.

Quote from the story: "First she built a calendar app for her family, but then used Amazon's AI-powered coding tool Kiro to write an app for Amazon's internal "Everyone Can Build" event." That is both production use, even if somewhat simpler.

I do not see "I review and simplify the code" anywhere in there. If that is accurate, you WILL fail, maybe a bit later than most others. You are NOT careful enough.

You are claiming I do not see what I see teaching? Nice. Completely removes all credibility you might have.

Your problem is functional illiteracy, combined with arrogance. Read the story again. DOB is _not_ transferred. Incidentally, your quote, which you apparently do not understand, strengthens my argument. And, FYI, I do did GDPR audits for a few years. I know what I am talking about instead of the mindless and harmful panic you are trying to spread.

And that is exactly why this exception is good. It provided precedent.

Is that a serious question? Do not be a child. Think before you post.