logoalt Hacker News

smashed • today at 12:45 PM • 2 replies • view on HN

On first glance it seems you are right.

> If you resorted to AI assistance to identify a bug, you must treat it as public. https://github.com/torvalds/linux/blob/master/Documentation/...


Replies

LeFantome • today at 2:35 PM

It is very interesting that they believe AI will find different bugs than people. That is, if you found a bug with AI the expectation is that others could find the same bug easily. But if you find it yourself, it is somehow more of a sensitive secret.

I do not imagine that things divide so clearly along these lines.

➕ show 6 replies
ReDress • today at 1:02 PM

I don't think AI is of much concern, if you actually have a valid security issue.

No-one, really will care if you discovered it via AI or otherwise. Because, the weight of the bug itself should outweight other concerns. This is how professional security works. There will always be one concern or the other about a bug but what carries more weight will determine the direction that the disclosure process takes.

A valid security bug, by itself should carry enough technical weight that concerns about whether it was discovered through AI or otherwise should become irrelevant.

Anyways, it mostly seems like people don't really care much about computer security at Linux. I would like to think they care more about infrastructure and related security issues because, well, if my computer is an open book, then why would security issues around it be a concern?

Anyways...

Enough said here - lol

➕ show 1 reply