alt Hacker NewsNot sure if this is gaslighting, an absurdist joke, or we are going through a collective psychosis.
KindOfCoders, AI is a very useful tool, but nothing works like the way you're explaining. I am kind of finding it hard to articulate the problem, because the assertion is just a bit wild. So I will do my best.
Thunderbird has been in production use for over 20 years, many many smart people have put their time into it to make sure it works correctly, yes, it is a bit clunky, it has a lot of craft, but you're not going to replace that much labour with running an AI agent for a few hours; despite the AIs usefulness in finding bugs and vulnerabilities. Not yet at least.
You are correct; however, agents can and do find terrible bugs in some of the most popular software in the world made by some of the most competent engineers on the planet.
I assume what KingOfCoders suggested is to run an agent almost like an antivirus which I guess sounds somewhat interesting but you'd have to re-run it on every update and probably spend many more hours+tokens for such a system to work properly.
But perhaps once inference gets truly cheap repository maintainers should include AI security checks for new software as part of their pipeline? I think that would make sense. Especially for repos that are frequently pwned like npm!