logoalt Hacker News

rvzyesterday at 3:42 PM4 repliesview on HN

You know what?

Great move.

Open-source supporters don't have a sustainable answer to the fact that AI models can easily find N-day vulnerabilities extremely quickly and swamp maintainers with issues and bug-reports left hanging for days.

Unfortunately, this is where it is going and the open-source software supporters did not for-see the downsides of open source maintenance in the age of AI especially for businesses with "open-core" products.

Might as well close-source them to slow the attackers (with LLMs) down. Even SQLite has closed-sourced their tests which is another good idea.


Replies

hayleoxyesterday at 3:56 PM

The tools are available to everyone. It's becoming easier for hackers to attack you at the same speed that it's becoming easier for you to harden your systems. When everyone gains the same advantage at the same time, nothing has really changed.

It makes me think of how great chess engines have affected competitive chess over the last few years. Sure, the ceiling for Elo ratings at the top levels has gone up, but it's still a fair game because everyone has access to the new tools. High-level players aren't necessarily spending more time on prep than they were before; they're just getting more value out of the hours they do spend.

show 1 reply
wild_eggyesterday at 3:51 PM

Haven't the SQLite tests always been closed? Getting access to them is a major reason for financially supporting them

zb3yesterday at 3:51 PM

> especially for businesses with "open-core" products.

Then good, that overengineered, intentionally-crippled crap should go away.