Hacker News new | past | comments | ask | show | jobs | submit
Marha01 | on: Is this the new cyber normal?
This situation is temporary.

It is obviously true that there can only be a finite number of serious security bugs in any given software. For a given level of LLM capability, there is a finite subset of these bugs that is actually discoverable and exploitable. Once this finite subset is exhausted, the tide of new vulnerabilities will stop.

Perhaps we will see a few more tides like this, as LLM capabilities advance further. But there will be an end.

funnybeam | parent | next
Is it obviously true? We are talking about Turing machines here and i am absolutely not an expert but i wouldn’t be surprised if there is an infinite number of potential vulnerabilities in most software.

I know there is some kind of mathematical proof that can be done to show the correctness of some software, but is that universally applicable or only in certain situations?

Would love to hear opinions on this from some one more knowledgeable in this area, as the “finite number of bugs” is a statement I’ve heard a lot lately and I’m not sure if it’s actually justified or not

JamesSwift | parent
Umm, what? Did we just enforce a global codefreeze in perpetuity? Or, even easier, did we just enforce a global codefreeze for the linux operating system in perpetuity? No? Ok, then how do we end up with a finite number of serious security bugs?
Marha01 | root | parent
Yes, new bugs could be introduced when software is modified. But any modifications should be safety-tested by frontier LLMs, so the likelyhood of them going into production is low. There will be occasional security bugs slipping by, but no longer a tide like today.