Comment Re:Ultimately is this not all to the good ? (Score 1) 62
You left out the category of new bugs created by the patches and "upgrades", especially for new features.
Which somehow made me think of an even worse race condition, though I'm not sure how to describe the level of abstraction here... If the AI search for bugs goes to a certain depth, and assuming there are no bugs in the search algorithms, then what happens when the AI gets a bit smarter and searches a bit more deeply?
Long time ago when I was first studying computer security, but I remember two fundamentals... First it is really hard to secure the valuable targets, because the attackers may be motivated to apply large amounts of resources if the target has sufficient value. At this point I'd try to refine the meaning of "value" in relative terms, but that doesn't simplify things. Meaning itself is context dependent and in one context data may have low value whereas the attacker has imagined a different context where it becomes much more valuable...
The second fundamental is the chain thing. The attacker only needs to find a weak link anywhere in the chain. The defense has to be perfect, and it's really hard to get perfect.