[flagged]
Project Glasswing: Securing critical software for the AI era
31–40 of 921 posts
Re: Project Glasswing: Securing critical software for the AI era
#32[deleted]
Re: Project Glasswing: Securing critical software for the AI era
#33So they are only giving access to their smartest model to corporations. You think these AI companies are really going to give AGI access to everyone. Think again. We better fucking hope open source wins, because we aren't getting access if it doesn't.
of course they're not giving access to everyone.
they better make billions directly from corporations, instead of giving them to average people who might get a chance out of poverty (but also bad actors using it to do even more bad things)
Re: Project Glasswing: Securing critical software for the AI era
#34Let's fast forward the clock. Does software security converge on a world with fewer vulnerabilities or more? I'm not sure it converges equally in all places. My understanding is that the pre-AI distribution of software quality (and vulnerabilities) will be massively exaggerated. More small vulnerable projects and fewer large vulnerable ones. It seems that large technology and infrastructure companies will be able to…
Most vulnerabilities seem to be in C/C++ code, or web things like XSS, unsanitized input, leaky APIs, etc.
Perhaps a chunk of that token spend will be porting legacy codebases to memory safe languages. And fewer tokens will be required to maintain the improved security.
Re: Project Glasswing: Securing critical software for the AI era
#35Earlier quoted context omitted.
They are not our friends and are the exact opposite of what they are preaching to be. Let alone their CEO scare mongering and actively attempting to get the government to ban local AI models running on your machine.
How would you expect them to behave if they were your friends?
They are a for-profit company, working on a project to eliminate all human labor and take the gains for themselves, with no plan to allow for the survival of anyone who works for a living. They're definitionally not your friends. While they remain for-profit, their specific behaviors don't really matter.
Re: Project Glasswing: Securing critical software for the AI era
#36So they are only giving access to their smartest model to corporations. You think these AI companies are really going to give AGI access to everyone. Think again. We better fucking hope open source wins, because we aren't getting access if it doesn't.
And the Linux Foundation.
Re: Project Glasswing: Securing critical software for the AI era
#37but people here had told me llms just predict the next word
Re: Project Glasswing: Securing critical software for the AI era
#38[flagged]
Re: Project Glasswing: Securing critical software for the AI era
#39Let's fast forward the clock. Does software security converge on a world with fewer vulnerabilities or more? I'm not sure it converges equally in all places. My understanding is that the pre-AI distribution of software quality (and vulnerabilities) will be massively exaggerated. More small vulnerable projects and fewer large vulnerable ones. It seems that large technology and infrastructure companies will be able to…
I'm pretty optimistic that not only does this clean up a lot of vulns in old code, but applying this level of scrutiny becomes a mandatory part of the vibecoding-toolchain. The biggest issue is legacy systems that are difficult to patch in practice.
Wait. Wasn't AI supposed to alleviate the burden of legacy code?!
Re: Project Glasswing: Securing critical software for the AI era
#40So they are only giving access to their smartest model to corporations. You think these AI companies are really going to give AGI access to everyone. Think again. We better fucking hope open source wins, because we aren't getting access if it doesn't.
This story has been played out numerous times already. Anthropic (or any frontier lab) has a new model with SOTA results. It pretends like it's Christ incarnate and represents the end of the world as we know it. Gates its release to drum up excitement and mystique.
Then the next lab catches up and releases it more broadly
Then later the open weights model is released.
The only way this type of technology is going to be gated "to only corporations" is if we continue on this exponential scaling trend as the "SOTA" model is always out of reach.