logoalt Hacker News

orangedog • today at 4:20 PM • 2 replies • view on HN

Damned if you do, damned if you don't. Do you prefer they not engage in helping finding vulns at all? Do you not think there are parts of the company interested in security and doing it for the sake of that?

I feel like taking every action these companies take as part of some larger strategy is kind of conspiracy-minded.


Replies

kafrofrite • today at 5:41 PM

Disclaimer: I work as a sec engineer and part of my job includes finding vulnerabilities.

I think the effort is misplaced. We should be exploring ways to make our systems more resilient and I would expect those companies* to focus on that front. Vulnerability research is important, and we should aim to remove as many bugs as we can from our codebases but the pace of software development is increasing and so is the introduction of new bugs.

* I would also expect an increase on relevant research regarding novel paradigms of securing systems.

redanddead • today at 4:26 PM

Why didn't OAI go back to non-profit again?

Where's the conspiracy. There is no moat. The technology is easily reproducible. Deepseek unwound an entire business model yesterday.

➕ show 2 replies