Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft has released software updates to plug at least 570 security holes

krebsonsecurity.com

Post reply on HN
Print view View original

21–30 of 132 posts

Re: Microsoft has released software updates to plug at least 570 security holes

#21

Post by pixl97 »

lousken wrote: post #14
tokioyoyo wrote: post #10

Earlier quoted context omitted.

20 years ago software wasn't as much battle tested as today, had way less feature set, was less connected to the internet, and etc. 428 CVEs looks small, assuming not all have CVSS 9.8 or something.

It was more tested as real testers were testing it. Nowadays, AI just checks the code.

I guess we should find some of this old source code and test it for exploits to see what is true.

Re: Microsoft has released software updates to plug at least 570 security holes

#22

Post by stackghost »

ashleyn wrote: post #18
charonn0 wrote: post #16

It seems like bug hunting might be the one area where AI is actually making the world a better place.

How many were introduced by misuse of AI coding/vibe coding though?

At Microslop? Evidently, lots.

Re: Microsoft has released software updates to plug at least 570 security holes

#23

Post by fragmede »

pixl97 wrote: post #21
lousken wrote: post #14

Earlier quoted context omitted.

It was more tested as real testers were testing it. Nowadays, AI just checks the code.

I guess we should find some of this old source code and test it for exploits to see what is true.

https://github.com/microsoft/ms-dos

Re: Microsoft has released software updates to plug at least 570 security holes

#24

Post by miffy900 »

ashleyn wrote: post #18
charonn0 wrote: post #16

It seems like bug hunting might be the one area where AI is actually making the world a better place.

How many were introduced by misuse of AI coding/vibe coding though?

highly unlikely for many of them. SharePoint, bitlocker, Active directory, hyper-v, rdp, DHCP and MSMQ are all software/technologies that have decades of history and long pre-dated LLMs. seriously, do people not realise it was entirely possible to write insecure or bad code before LLMs?

Re: Microsoft has released software updates to plug at least 570 security holes

#25

Post by miffy900 »

netsharc wrote: post #15
lousken wrote: post #12

It would be nice if microsoft had windows update for .net, visual c++, office, windows, edge ... just all their software in one updater, but that would be too easy...

Isn't that... Windows Update? At least last time I looked it would update .net runtimes, Office, what else? OK, Visual Studio has its own update mechanism. Edge is part of the OS, isn't it?

it's still an opt-in setting though. Windows and OS-components like drivers and Edge do get auto updated yes, but to enable Microsoft Update, you still need to turn on a setting in the Settings app. even setting up a new PC/laptop with windows, this is off by default.

Re: Microsoft has released software updates to plug at least 570 security holes

#26

Post by jayd16 »

lousken wrote: post #12

It would be nice if microsoft had windows update for .net, visual c++, office, windows, edge ... just all their software in one updater, but that would be too easy...

It did work that way for .NET versions but the patches and upgrades caused too many bugs and incompatibility. Folks would install old .net versions anyway.

The pattern moved to packaging in all your dependencies.

Winget/Microsoft Store etc could auto-update your apps even with packaged .NET DLLs, though.

Re: Microsoft has released software updates to plug at least 570 security holes

#27

Post by anonymars »

nobodyandproud wrote: post #13
lousken wrote: post #12

It would be nice if microsoft had windows update for .net, visual c++, office, windows, edge ... just all their software in one updater, but that would be too easy...

You mean…service packs?

No, "Microsoft Update" is what it was once called (see e.g. https://learn.microsoft.com/en-us/windows/deployment/update/...)

Re: Microsoft has released software updates to plug at least 570 security holes

#29

Post by shakna »

miffy900 wrote: post #24
ashleyn wrote: post #18

Earlier quoted context omitted.

How many were introduced by misuse of AI coding/vibe coding though?

highly unlikely for many of them. SharePoint, bitlocker, Active directory, hyper-v, rdp, DHCP and MSMQ are all software/technologies that have decades of history and long pre-dated LLMs. seriously, do people not realise it was entirely possible to write insecure or bad code before LLMs?

Sure, that's true.

It is also true that Copilot is currently in use developing Bitlocker and Sharepoint. So I wouldn't be confident saying it was one or the other.

Post reply on HN