Forgot your password?
typodupeerror

Comment Re:LLM driven security is a scam (Score 1) 7

I do know about the increase in CVEs. But since I have some actual understanding of the matter, I can see it is NOT a good thing. LLMs massively advantage attackers, while helping defenders very little.

And, quite frankly, some of these newly found vulnerabilities are just the result of shoddy coding and no tool use. For example, use-after-free is NOT something that only an LLM or manual review finds. It is not something that is even exploitable with reasonable coding practices. Even frigging plain GCC has an option for finding these days. But people have no clue how to use it, apparently and no clue how to write secure and robust code. So, for a time, LLMs will find vulnerabilities that should have been found before by other tools, but that will die down. Except for attackers, that can ask for vulnerabilities in code in a million different ways (which the defenders cannot do) and that need to find just one (while the defenders need to find all of them).

Comment Re:"the most likely scenario is that it doesn't wo (Score 1) 74

The DWave is a very nice long-running scam that depends on people not understanding what a QC is. Because actual QCs are so incredibly weak (with a factorization record of 21, and 35 still failed), the DWave essentially does something like chemical computing (in the widest sense) to handily beat that and then the scammers pretend they have a powerful QC.

What really gets me that we now have 50 years of no useful computing mechanisms from QC research. And people are still in denial. A lot of really long-term magical thinking at work.

Comment Re:Shows you what they were thinking (Score 2) 68

They are not super interested in thinking. Just in getting rich without effort, including mental effort.

Incidentally, I just saw a study that predicts that in 2028, LLM-code will be more expensive to get than code written by people. And that does not take insecurity, review-resistance, bad maintainability, loss of engineering skills and institutional knowledge, etc. into account. The whole thing is a massive hallucination by completely disconnected idiots.

Comment LLM driven security is a scam (Score 1) 7

If does not work and cannot work. LLMs are both far too limited and far too unreliable to be useful. They can create a massive sense of false security though. And while they need to be run on software (because attackers will do it), that does not make that software secure.

Stop believing LLMs are magic. They are not.

Slashdot Top Deals

Don't get suckered in by the comments -- they can be terribly misleading. Debug only code. -- Dave Storer

Working...