Home | Notifications | New Note | Local | Federated | Search | Logout
Michał "rysiek" Woźniak · 🇺🇦@rysiek@mstdn.social
Hacker, activist, free-softie ◈ techie luddite ◈ formerly information security and infrastructure at https://isnic.is/ and https://occrp.org/ ◈ my opinions are my own etc.
(he/him)
⁂
profile image: drawing of a head and shoulders of a cat-person, in a space suit.
banner image: long-exposure photo of a large tent, brightly illuminated from inside, looking as if it is made of lava
#foss #libre #privacy #infosec #fedi22
(public toots CC By-SA 4.0 if applicable)
🇪🇺 🇵🇱 · 🇧🇦 🇮🇸 · 🇺🇦
blog: https://rys.io
Black Lives: Matter
Trans Rights: are Human Rights
ancient me: @rysiek@mastodon.social
Joined: 2026-07-22 12:41:14
4 notes, 0 following, 0 followers
Michał "rysiek" Woźniak · 🇺🇦@rysiek@mstdn.social (2026-08-17 18:23:43)
I am shocked. Nobody could have seen it coming. Nobody, I tell you! :blobcatcoffee:
https://futurism.com/future-society/college-critical-thinking-ai
> As one New York financier told Financial Times journalist Gillian Tett, new hires who were seen as “AI natives” are turning out to have alarmingly shallow ideas. So much so, the anonymous finance worker admitted, that his firm now actively avoids seeking out AI-literate STEM graduates, and opts to comb through humanities students instead.
Oh, the humanities!
#AI
Reply to @rysiek@mstdn.social
Michał "rysiek" Woźniak · 🇺🇦@rysiek@mstdn.social (2026-07-28 20:10:31)
@drwhax finding vulnerabilities can be stochastic because it has a very clear and effective verification function: either the exploit works or it does not. Exploit code can be messy and convoluted, as it is not going to be maintained after the vulnerability is fixed.
Vibe-coding fixes does not have that kind of verification function: the fix must not only close the specific vulnerability, but *also* not introduce new ones or re-introduce old ones, and it has to be maintainable in the future.
Reply to @drwhax@infosec.exchange
Michał "rysiek" Woźniak · 🇺🇦@rysiek@mstdn.social (2026-07-28 20:07:19)
@drwhax I think we need a bit of nuance here.
As much as I am no fan of LLMs, I can see the value of running them over one's own codebase in order to find vulnerabilities.
But I remain unconvinced that vibe-coded fixes are a good idea, or ever will be. I think this needs to be clearly said.
The reason is that these are fundamentally different problems.
Michał "rysiek" Woźniak · 🇺🇦@rysiek@mstdn.social (2026-07-22 09:29:23)
Linux kernel developers:
We know what we're doing, we have loads of experience!
Also Linux kernel developers:
432 Linux Kernel CVEs in 24 hours:
https://lore.kernel.org/linux-cve-announce/
*sigh*