Live data from Hacker News

Microsoft has released software updates to plug at least 570 security holes

krebsonsecurity.com

51–60 of 132 posts

Re: Microsoft has released software updates to plug at least 570 security holes

#52
post #4

I wonder how many bugs will be introduced with these fixes...

Fix one and add two.

There used to be a brilliant weather app here in Oz back in the early days of iOS. I always loved the update notes the author provided. One was "Fixed one grammatical error and introduced another one, can you find it?"

Re: Microsoft has released software updates to plug at least 570 security holes

#53
post #18

It seems like bug hunting might be the one area where AI is actually making the world a better place.

How many were introduced by misuse of AI coding/vibe coding though?

For what it's worth, at my workplace AI has uncovered quite a few issues that have been there for a decade or two and survived countless rounds of careful reviews, external security analysis, pen testing and so forth for all those years.

Re: Microsoft has released software updates to plug at least 570 security holes

#54
post #18

Earlier quoted context omitted.

How many were introduced by misuse of AI coding/vibe coding though?

highly unlikely for many of them. SharePoint, bitlocker, Active directory, hyper-v, rdp, DHCP and MSMQ are all software/technologies that have decades of history and long pre-dated LLMs. seriously, do people not realise it was entirely possible to write insecure or bad code before LLMs?

> seriously, do people not realise it was entirely possible to write insecure or bad code before LLMs?

Some of these threads make me think every line of code written pre-LLMs was apparently perfect in all ways. Feels like romanticizing the past.

Re: Microsoft has released software updates to plug at least 570 security holes

#55
post #45

Earlier quoted context omitted.

Not if it ends up deskilling society and taking away what brings us meaning in life.

I don't see why AI would deskill what you love to do. People still do embroidery even though mass manufacturing exists. If you love something you would continue doing it irrespective of automation.

[deleted]

Re: Microsoft has released software updates to plug at least 570 security holes

#56

This is great. Now ask Mythos to make windows suck less and let it go crazy.

Deletes Windows 11 Installs Windows 7 with new patches

What would be the point of any of this if the registry is still there? It'd just a particularly shit version of linux window management that happens to run games well

Re: Microsoft has released software updates to plug at least 570 security holes

#57
post #45

Earlier quoted context omitted.

Not if it ends up deskilling society and taking away what brings us meaning in life.

I don't see why AI would deskill what you love to do. People still do embroidery even though mass manufacturing exists. If you love something you would continue doing it irrespective of automation.

But do people make a living doing embroidery by hand? Or is it more of a hobby?

Re: Microsoft has released software updates to plug at least 570 security holes

#58

Sounds like a lot but compare it to Edge also being patched for 428 Chromium CVEs this month. If 20 years ago you told me a single piece of software had 428 vulnerabilities I wouldn't have believed it. If Chromium has that many security bugs, perhaps the move fast and break things approach of spraying diarrhea masquerading as code into a keyboard — in a rush to add new features no one asked for — needs to be reexamin…

Chromium is probably 30 million+ lines of code, and we generally see that as things get more complex its even easier to accidentally write code which can be exploited.

If it has 1 vulnerability in every 10k loc of code we'd be talking about 3,000 vulns (with no churn) - we used to care about defect density, and most software wouldn't go more than a few hundred lines without SOME bug, whether that's a "vulnerability" is often a layered question.

Re: Microsoft has released software updates to plug at least 570 security holes

#59
post #18

It seems like bug hunting might be the one area where AI is actually making the world a better place.

How many were introduced by misuse of AI coding/vibe coding though?

The distinction I'd draw is between AI-assisted and AI-generated. Using AI to write isolated functions you understand and review is different from prompting your way to a complete system you can't debug. The second case is where you get surprising failures at runtime that no amount of linting catches.

Re: Microsoft has released software updates to plug at least 570 security holes

#60
post #18

Earlier quoted context omitted.

How many were introduced by misuse of AI coding/vibe coding though?

highly unlikely for many of them. SharePoint, bitlocker, Active directory, hyper-v, rdp, DHCP and MSMQ are all software/technologies that have decades of history and long pre-dated LLMs. seriously, do people not realise it was entirely possible to write insecure or bad code before LLMs?

It’s like people don’t remember the whole outsourcing trend and all the awful code that came from that.
Post reply on HN