Live data from Hacker News

Google fixed more Chrome bugs in June than over the past two years, thanks to AI

blog.google

451–460 of 668 posts

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#451
post #414

Earlier quoted context omitted.

I'll await your Rust ports of Windows, Linux and MacOS then. This isn't really a fair take. Keep in mind that C/C++ has been the backbone of the most important software in the world since the 1970s. At that time we didn't have virtually unlimited compute and memory at our fingertips the way we do now. It was a huge improvement to have a high level language which still could be optimized nearly as well as assembly. It…

C is literally "high level assembly" and therefore lacks any guard rails you'd expect in a programming language. It's just unfortunate that so many software developers embraced C for its speed, even when it wasn't strictly needed. I always remind people that C is a systems programming language and not fit for regular application programming. For that you need an application programming language like Pascal or Java.

yea, we certainly wouldn’t want regular user applications to run fast or respect user resources. can’t have that

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#452

To me this merely signals how broken C++ development really is. Most if not all of the bugs being uncovered are memory related and therefore intimately tied to the mental memory model of C and C++, namely manual memory management. It's fine for a C or C++ program encompassing a couple hundred lines but beyond that it's a liability. C and C++ are simply not fit for purpose when large scale software projects are concer…

This seems an awful lot like confirmation bias. Web browsers are themselves extremely complicated.

Also, this doesn't address why the rate increased, which is the interesting part!

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#453

Earlier quoted context omitted.

I assure you that Microsoft knew for years that there were thousands if not tens of thousands of memory related bugs lurking in Windows. But their policy was "don't fix" (and "don't look") unless a remotely exploitable vulnerability was making headlines. Because every minute a developer spends finding and fixing bugs is a minute he can't spend on adding new features customers will pay for. Luckily one of the perks of…

And I can assure you that there were a number of MS research developed tools for finding memory bugs that have been used for decades at MS. There was never a don’t look / don’t fix policy while I was there. Quite the contrary.

Was there ever a time, apart from the short monthlong stint in 2001 after Blaster, when Microsoft developers worked on fixing memory related bugs?

Automated tools (before the advent of A.I.) can only get you so far. The bugs being found by A.I. today could've been found by eyeballs if companies thought it worthwhile.

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#454

Earlier quoted context omitted.

C is literally "high level assembly" and therefore lacks any guard rails you'd expect in a programming language. It's just unfortunate that so many software developers embraced C for its speed, even when it wasn't strictly needed. I always remind people that C is a systems programming language and not fit for regular application programming. For that you need an application programming language like Pascal or Java.

yea, we certainly wouldn’t want regular user applications to run fast or respect user resources. can’t have that

I, for one, can't see any speed difference between a program written in Pascal (Total Commander, which I use every day) and one written in C++ (Windows Explorer).

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#455

Earlier quoted context omitted.

C is literally "high level assembly" and therefore lacks any guard rails you'd expect in a programming language. It's just unfortunate that so many software developers embraced C for its speed, even when it wasn't strictly needed. I always remind people that C is a systems programming language and not fit for regular application programming. For that you need an application programming language like Pascal or Java.

yea, we certainly wouldn’t want regular user applications to run fast or respect user resources. can’t have that

false dichtonomy

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#456

Earlier quoted context omitted.

Very few problems really have "all the tooling to verify its hypotheses" though. even if you want to construct such an harness. Also let me ask you why we need better and better and models if what we have already can produce good output with 'all the tooling to verify its hypotheses'

> Very few problems really have "all the tooling to verify its hypotheses" This is such a blanket dismissal that I can’t agree or disagree. Maybe very few of YOUR problems are this way. At least mention some problem domains. Recent experiences: compiler-related (helpful), UI-related (agree it isn’t testable but the design iteration is quick, easy, and correct), debugging technical configuration problems (useless; I b…

> This is such a blanket dismissal that I can’t agree or disagree.

> Maybe very few of YOUR problems are this way. At least mention some problem domains.

i did in second part of my comment. why do you think billions are being poured into ai if ai can already do verifable tasks.

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#457

Earlier quoted context omitted.

> The post has counts for everything that went right and nothing for what could go wrong. That's AI for you. At Amazon we have many forums to share our AI wins, but none to share AI failures or disappoinments. No wonder execs make bad decisions regarding AI, they only hear completely one-sided stories.

In $COMPANY, for the mid-yearly review, the employees were asked whether their AI usage was 1/ efficient, 2/ adoptive (integrated in the way they work) or 3/ transformative. Saying “never used it” or “I tried and it was useless” was literally not possible.

You'd have to be a pretty stubborn software engineer to not find AI useful for anything at this point, unless they're making you use Github Copilot or something far behind the frontier. You don't have repetitive tests to write? You never need to write a script to run something?

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#458

To me this merely signals how broken C++ development really is. Most if not all of the bugs being uncovered are memory related and therefore intimately tied to the mental memory model of C and C++, namely manual memory management. It's fine for a C or C++ program encompassing a couple hundred lines but beyond that it's a liability. C and C++ are simply not fit for purpose when large scale software projects are concer…

Rust certainly helps for certain classes of errors but doesn't help at all for logic errors or incompletely understood requirements or occasional need for hacks due to business needs.

It basically completely eliminates the most common class of errors which are bugs related to memory management. Hard numbers and statistics show that every application with enough complexity will be riddled with those.

It is simply impossible, even for the smartest human minds, to manage this kind of complexity. And this is a fact.

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#459

To me this merely signals how broken C++ development really is. Most if not all of the bugs being uncovered are memory related and therefore intimately tied to the mental memory model of C and C++, namely manual memory management. It's fine for a C or C++ program encompassing a couple hundred lines but beyond that it's a liability. C and C++ are simply not fit for purpose when large scale software projects are concer…

Rust certainly helps for certain classes of errors but doesn't help at all for logic errors or incompletely understood requirements or occasional need for hacks due to business needs.

It does help for logic errors too, with, eg, sum types and traits and abstraction.

Also better defaults.

Re: Google fixed more Chrome bugs in June than over the past two years, thanks to AI

#460

Earlier quoted context omitted.

Very few problems really have "all the tooling to verify its hypotheses" though. even if you want to construct such an harness. Also let me ask you why we need better and better and models if what we have already can produce good output with 'all the tooling to verify its hypotheses'

> Also let me ask you why we need better and better and models if what we have already can produce good output with 'all the tooling to verify its hypotheses' “Good” isn’t “perfect” and even if it was, the ability to produce perfect output with all the tooling to verify its hypotheses could still be improved, in time and token efficiency, by better models producing fewer spurious hypotheses, rejecting those it does g…

[deleted]
Post reply on HN