Smoking and alcohol are primarily banned for children because they do A LOT more damage in children. For example, smoking before you are 16 or so has significant lifelong negative effects. If you smoke as an adult, and then stop, after a few years the effects are gone. Similar effects for alcohol. Similar effects for weed. Nobody knows for social media.

This is a teensy bit more complicated.

Your problem is that you are "full of shit". Since you cannot see that, you dump on others pointing things out that are inconsistent with your misconceptions. You also massively oversimplify things and hence do not see what is actually going on. Common mistake.

For reference, I teach this stuff to a larger number of students, many with professional experience, every semester. And there is an evaluation every semester. Seriously, I KNOW where I stand. You do not.

No, I meant there may not be known exploits. Using an LLM does not change that. The thing is, many potential security bugs are really "risks" and it is not clear whether they are exploitable. May require special circumstances that are unknown. May actually be prevented by something else, but that something else can break in the future. May require a race-condition with really low probability and that is only there on some hardware. May not be exploitable at all, but better be careful. In a kernel, defensive coding and redundant security ("defense in depth") is critical.

Nope. The illusion just got better. The computing power did not. Stop believing in magic.

You do understand what "intentional" means, right?

Just expect LLM tools to become a lot less powerful or a lot more expensive. Actual developers being cheaper has been observed in several places already. And the token prices still do not cover cost.

Running Debian with your own kernels is easy, except for the really deranged grub automation. I mount /boot ro to prevent it getting clobbered all the time.

It is actually not that many, because the LLM peddlers are massively overstating things. And it is not even hard to find ones. For example, those "273 zero-days in FF" turned out to be 3 (!) in the actual patch notes, two of them use-after-free which really do not need LLMs to be found. GCC can do it. Good coding practices (setting pointers to NULL after freeing memory) prevent exploitability.

My take is these CVEs will be a lot of low-risk ones, many without exploits. In a kernel, these should definitely be secured as well, for redundancy, even if in applications they would probably not be. Also, in a few months, this will dry up.

I.e. low-hanging fruit being found because AI looks at things a bit differently. Should clear up soon.

Kind of does not make the kernel much more secure in general as AI only finds simple to find bugs, but needs to be done as attackers will use AI as well. Unfortunately, attackers can randomize the process, so this helps only against low/no-clue LLM-based attacks. But the no-clue AI fueled attackers are going to be a real problem for a while, hence this still is a good thing. Just do not read too much into it.

when all they had to do was use a map?
how did they manage to not get slaughtered in Afghanistan and Iraq, without AI?

You are deeply delusional. And you have no clue what "state level actors" can actually do.

You seem to be mentally defective because you hallucinate things opposite to observable reality.

Obviously. But why were they not in place?

You wish. But you just exposed yourself as a member of the "cult of AI". You seem to think AI is magic. It is not.

Well, you are clearly an anti-human cretin. So that fits.