197
The 4th Linux kernel flaw this month can lead to stolen SSH host keys (www.zdnet.com)
submitted 4 months ago by to c/technology@lemmy.world
54 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[+] -96 points 4 months ago (40 children)

All found with AI, you haters. And Linus complains the mailing list is too busy… with bugs.

  • permalink
  • fedilink
  • source
  • hideshow 40 child comments
    •
  • [–] 67 points 4 months ago (11 children)

    too busy… with bugs.

    with duplicate bug reports.

    “the continued flood of AI reports has basically made the security list almost entirely unmanageable, with enormous duplication due to different people finding the same things with the same tools.”

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 11 child comments
    •
  • [+] -58 points 4 months ago (10 children)

    Mailing lists, it turns out, is a bad tool.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 38 points 4 months ago (9 children)

    It's worked for over 30 years, until the slop generators turned on.

    Dunno duder

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [+] -37 points 4 months ago (8 children)

    Times change. I’d say if slop finds exploitable bugs, it’s not slop. And if your 30 year old method of doing something doesn’t work anymore, take a few minutes to make a better solution. 🤷‍♂️

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 25 points 4 months ago (2 children)

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven't been spotted, but there's a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don't add anything to the conversation

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -1 points 4 months ago (1 child)

    Duplicates don’t add anything to the conversation

    But it's not the same person reporting the same bug multiple time but rather a new tool enabling multiple people to discover that same bug at the same time.

    Not reporting it because "someone else probably will" is a sociopsychological phenomenon called diffusion of responsibility.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 22 points 4 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven't been spotted, but there's a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don't add anything to the conversation

  • permalink
  • fedilink
  • source
  • parent
  • [–] 20 points 4 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven't been spotted, but there's a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don't add anything to the conversation

  • permalink
  • fedilink
  • source
  • parent
  • [–] 19 points 4 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven't been spotted, but there's a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don't add anything to the conversation

  • permalink
  • fedilink
  • source
  • parent
  • [–] 5 points 4 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven’t been spotted, but there’s a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don’t add anything to the conversation

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 4 months ago

    Yes but the problem is that people keep submitting the same bug again and again and again. Some bugs exist because they haven't been spotted, but there's a heckton of bugs that are known about, but no-one has been able to put forward a fix for them yet. Overloading people with duplicate reports just means that they have less time and brainspace available to spend on fixing bugs.

    Duplicates don't add anything to the conversation

  • permalink
  • fedilink
  • source
  • parent
  • [–] 47 points 4 months ago (7 children)

    All found with some AI assistance and a lot of human expertise sifting through the hallucinations to work out the actually exploutable stuff. And the AI bug apocalypse has turned up a whole 4 bugs serious bugs so far, ooo scary. I'm still waiting to be impressed.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 14 points 4 months ago

    And that (obviously) is the low hanging fruit. We end up with a more secure kernel, and these filter in at a manageable rate and the bar raises. Pretty damn good scenario IMO.

    Closed source is going to have a much worse time.

  • permalink
  • fedilink
  • source
  • parent
  • [+] -39 points 4 months ago (3 children)

    No one thinks impressing you is a goal.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 29 points 4 months ago (14 children)

    Why are you like this?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [+] -32 points 4 months ago (13 children)

    Lemmy has driven me to be an angry person who likes to point out how hypocritical people are.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 13 child comments
    •
  • [–] 37 points 4 months ago (10 children)

    You should try not sucking at it though.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [+] -26 points 4 months ago (9 children)

    Sucking is relative. I would have to respect you for that to be an insult.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 11 points 4 months ago (8 children)

    You're getting ratio'd pretty hard (by lemmy standards)

    You don't have anyone here's respect, so why would they care for yours?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [+] -19 points 4 months ago (7 children)

    I don’t have any concern for votes because I do not display them. Just because you, and several other alt accounts can push a down button doesn’t mean that will ever affect me – because I can’t see it. However, according to you – every single down voted comment is a bad comment regardless of its content. So according to you, if I get downloaded for complaining about, let’s say murdering innocent children, then I must be a bad person. Your logic doesn’t work out buddy.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 9 points 4 months ago* (5 children)

    I didn't read your message.

    Edit: Because you seem a little thick: Because I don't respect you.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [+] -14 points 4 months ago (4 children)

    👍

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 6 points 4 months ago (3 children)

    Glad we understand each other.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 5 points 4 months ago (3 children)

    All found with AI, you haters. And Linus complains the mailing list is too busy… with bugs.

    All found with my infinite set of monkeys on typewriters.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 4 months ago (1 child)

    This isn't an example of a broken clock being right twice a day. Torvalds is complaining that his inbox is flooded with bug reports because everyone's monkey suddenly started outputting Shakespeare.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 4 months ago*

    Torvalds is complaining that his inbox is flooded with endlessly duplicated bug reports because everyone’s monkey suddenly started outputting low-grade, plagiarized, relentlessly repeated "Shakespeare"

  • permalink
  • fedilink
  • source
  • parent