Linux

15321 readers

249 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 3 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

142

Chart of Linux security vulnerabilities fixed per kernel version (media.piefed.social)

submitted 2 days ago by Ek-Hou-Van-Braai@piefed.social to c/linux@programming.dev

34 comments fedilink hide all child comments

Source: https://github.com/gregkh/kernel-development/blob/master/graphs%2Fpatches_per_release%2Fcves_fixed_per_release.png

AI coding tools are pretty good at finding bugs and make it easier and faster to fix them.

Importantly, security vulnerabilities in new releases seem to stay roughly the same and the change to which bugs count as CVEs was around version 6.8 already.

you are viewing a single comment's thread
view the rest of the comments

[–] Blue_Morpho@lemmy.world 6 points 2 days ago (1 children)

"if that were entirely true, what i said would not be."

I explained the difference in methodology and you doubled down as if they were the same.

[–] lime@feddit.nu 2 points 2 days ago (1 children)

in that case i should have been more clear. i do not believe it's strictly one or the other, which is why the word "entirely" is in there. you're generalising over a huge range of developer quality and basically saying that they are all worse at building software than linus, despite the fact that we have been seeing regressions in projects like rsync, which has one of the most disciplined maintainers in the foss ecosystem.

[–] Blue_Morpho@lemmy.world 2 points 2 days ago (1 children)

you're generalising over a huge range of developer quality and basically saying that they are all worse at building software than linus

You claimed that Linux could see regressions just like all other projects DESPITE the different methodology.

basically saying that they are all worse at building software than linus

That is claim that any AI use of any type results in regressions. That is obviously false.

Just because AI suggested using glue on pizza doesn't mean that everyone now puts glue on their pizza.

[–] lime@feddit.nu 1 points 2 days ago* (last edited 2 days ago)

i claimed no such thing. i asked for a graph because i was interested to know if that was the case.

and what we've been seeing in the industry lately is that llm use of any kind results in more regressions, because more code is created and it tends towards average quality.