Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft has released software updates to plug at least 570 security holes

krebsonsecurity.com

Post reply on HN
Print view View original

71–80 of 132 posts

Re: Microsoft has released software updates to plug at least 570 security holes

#71

Post by Cthulhu_ »

tokioyoyo wrote: post #10
naturalmovement wrote: post #5

Sounds like a lot but compare it to Edge also being patched for 428 Chromium CVEs this month. If 20 years ago you told me a single piece of software had 428 vulnerabilities I wouldn't have believed it. If Chromium has that many security bugs, perhaps the move fast and break things approach of spraying diarrhea masquerading as code into a keyboard — in a rush to add new features no one asked for — needs to be reexamin…

20 years ago software wasn't as much battle tested as today, had way less feature set, was less connected to the internet, and etc. 428 CVEs looks small, assuming not all have CVSS 9.8 or something.

20 years ago was 2006, I can assure you we were very consciously aware of things being permanently connected to the internet by then.

That said, sure, it had a fraction of the features back then, and only a fraction of the world population was connected to the internet.

Re: Microsoft has released software updates to plug at least 570 security holes

#72

Post by Cthulhu_ »

lousken wrote: post #14
tokioyoyo wrote: post #10

Earlier quoted context omitted.

20 years ago software wasn't as much battle tested as today, had way less feature set, was less connected to the internet, and etc. 428 CVEs looks small, assuming not all have CVSS 9.8 or something.

It was more tested as real testers were testing it. Nowadays, AI just checks the code.

Is that true or an assumption? I don't think Chrome and co would discard their decades worth of automated testing practices in favor of AI.

Actually I don't need to think / assume, it's an open source project.

Re: Microsoft has released software updates to plug at least 570 security holes

#73

Post by Cthulhu_ »

gerdesj wrote: post #2

"Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence." If only real intelligence found the fucking things instead. As ye sew, so shall ye reap!

By all means, show us your records of finding vulnerabilities that thousands of engineers and security researchers missed over decades.

Not sure what the biblical quote is about either.

Re: Microsoft has released software updates to plug at least 570 security holes

#76

Post by onion2k »

ashleyn wrote: post #18
charonn0 wrote: post #16

It seems like bug hunting might be the one area where AI is actually making the world a better place.

How many were introduced by misuse of AI coding/vibe coding though?

Vibe-coded apps probably have loads, but mostly because they're using less capable models than the people who're doing the bug-hunting. Once vibe-coders are using models like Mythos too you should expect the number of bugs in vibe-coded apps to collapse quickly, because the LLM will write the bugs but will also fix them (assuming the system prompt tells it to.)

Re: Microsoft has released software updates to plug at least 570 security holes

#77

Post by stubish »

fuckinpuppers wrote: post #31

This is great. Now ask Mythos to make windows suck less and let it go crazy.

It would certainly make sense to sick it on all those crash reports and complaints. All the obscure 0x error codes that end up with you being punted to the forums for 'community support' and being told to reinstall everything.

Re: Microsoft has released software updates to plug at least 570 security holes

#78

Post by datakan »

warshinder wrote: post #60
miffy900 wrote: post #24

Earlier quoted context omitted.

highly unlikely for many of them. SharePoint, bitlocker, Active directory, hyper-v, rdp, DHCP and MSMQ are all software/technologies that have decades of history and long pre-dated LLMs. seriously, do people not realise it was entirely possible to write insecure or bad code before LLMs?

It’s like people don’t remember the whole outsourcing trend and all the awful code that came from that.

Don't forget the damned interns!

Re: Microsoft has released software updates to plug at least 570 security holes

#79

Post by Razengan »

ashleyn wrote: post #18
charonn0 wrote: post #16

It seems like bug hunting might be the one area where AI is actually making the world a better place.

How many were introduced by misuse of AI coding/vibe coding though?

Is it worse than what humans were doing on their own anyway?

Re: Microsoft has released software updates to plug at least 570 security holes

#80

Post by mr_mitm »

datakan wrote: post #78
warshinder wrote: post #60

Earlier quoted context omitted.

It’s like people don’t remember the whole outsourcing trend and all the awful code that came from that.

Don't forget the damned interns!

Everyone but me!
Post reply on HN