alt Hacker NewsOpenBSD's security stance being the stuff of legend, I'm curious how many vulns have been found over the last couple months while the big model companies are flaunting their ability to find exploits. It'd be super cool to see it remain tiny.
Replies
ectospheno • today at 3:11 PM
The commit logs over the last few months have highlighted when an issue was found by a program. They usually name the submitter and the tool.
mmooss • today at 3:41 PM
I think of it more as their attention to quality in their code:
Given the 'quality' of most code, especially under commercial pressure, it's no surprise that much more effective tools will find many more vulnerabilities. Did OpenBSDs quality approach work in this respect?
➕ show 1 reply
JCattheATM • today at 4:01 PM
> OpenBSD's security stance being the stuff of legend,
More so their marketing.
➕ show 1 reply
According to https://openai.com/index/patch-the-planet/
Linux: 24 LPEs, plus many additional vulnerabilities.
OpenBSD: 1 LPE.
FreeBSD: 7 LPEs, plus many additional vulnerabilities.
Not sure what that says, though. Perhaps the models are more likely to find Linux issues because of the training.