Twelve new vulnerabilities in X.Org Server and XWayland, uncovered by Trend Micro’s Zero Day Initiative with the help of AI, are fixed in xorg-server 21.1.25 and xwayland 24.1.14.
You must log in or register to comment.
- lambalicious@lemmy.sdf.orgEnglish8 hours
uncovered with the help of AI
So, how many of those are actually real?
- 42yeah@eviltoast.orgEnglish2 hours
As much as I advocate for human written code, we should also acknowledge that AI has gotten way more competent recently, esp. on the coding front. I think security and vulnerability scanning, (maybe together with code review?), should be the few valid uses of AI.
- fodor@lemmy.zipEnglish4 hours
Also, remember that “AI” means scripts in this context. We’ve used scripts to scan for vulnerabilities for decades. That alone is neither new nor scary.
There are serions issues with AI, including how you define it, but scanning code for weak points itself, on its own, is not one. It’s what you do with that data that matters.
- FauxLiving@lemmy.worldEnglish2 hours
Exactly.
AI is bad at a lot of things, but bug hunting isn’t one of them. It still requires an expert human to be effective but it lets them review a lot more code.