The number of reported security vulnerabilities has gone up drastically. And so has the frequency, number, and volume of security patches. Which also makes the gap between fully supported distributions and ones with only partial security support larger. (Not every distribution provides full security upddates for the full announced life time of a release.)
How are you folks reacting to this?
Its important to remember that the vulnerabilities always existed, we just know about them now. We have no idea how many of them were being quietly exploited before now.
There is no point being mad at AI for the avalanche of CVEs, if anything we should be mad ourselves for not prioritising security review of the code. Many of these issues probably could have been found before AI if we as an industry were willing to spend the resources doing the audits. But we werent willing, and now we have to pay for our sins.
you should listen to GKH’s review of the recent dumps of “CVEs” because you clearly don’t know what you’re talking about
Care to summarise?
https://m.youtube.com/watch?v=_MwMLPmMccs
I’m halfway through this, I assume that its what you mean? Nothing there so far invalidates what I said. 25% bad reports means 75% good reports.
Edit: I finished it, and nothing he says invalidates what I wrote.