martin_casado· @martin_casado · X·· 3 小时前
事实摘要
过去几个月的一大亮点,就是让 Greg 站出来在论战中挥拳……
正文 · 原文
Having Greg out swinging in the fray has been a highlight of the last few months …
Oh FFS. Thank you for your concern Sam, but don’t spread your FUD and doom bait in my waters. I lead one of the most utilized Linux operating systems in the world for data centers and enterprises, and I founded its predecessor too. While AI is surely accelerating finding human created security issues, it is a temporary problem, and most open source project leads have already figured out how to also use AI to reduce new bugs moving forward. Here is a graph from GKH (who maintains the stable kernel) on how many CVEs they are remediating per release: https://github.com/gregkh/kernel-development/blob/master/graphs/patches_per_release/cves_fixed_per_release.png This graph describes how much better each release is now getting: https://github.com/gregkh/kernel-development/blob/master/graphs/patches_per_release/cves_created_per_release.png This doom based marketing approach that the AI labs are pushing is really short sighted. While this will of course drive business to us, I find it unethical to distort the truth and use scare tactics in messaging. The greater truth is that AI is making the software industry more secure, by identifying the human errors in code, and soon we will end up in a much better place.在 X 查看被引用的帖子
来源:martin_casado · x.com