Wheeler supports a separate oss-security list for AI vulnerability reports
Original title: Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
He says open-weight models are already viable for finding and fixing flaws, and AI-hardened projects will become hard to attack.
David A. Wheeler replied on October 18 to a proposal for a separate oss-security list for AI vulnerability reports. He agreed that projects using AI to find and fix vulnerabilities and harden themselves will, in a few years, become very hard to attack. He said open-source projects do not need infinite money because open-weight models are already viable and not far behind. The feed snippet cuts off after additional points.
Unconfirmed: The rest of Wheeler's message is missing from the snippet.
- Wheeler posted on October 18 agreeing with Martin Steigerwald.
- The proposal would add a dedicated list for AI vulnerability reports.
- He says open-weight models are already a viable approach for OSS projects.
- The published snippet ends mid-sentence after mentioning further points.
From the original article
Posted by David A. Wheeler on Oct 18 Martin Steigerwald writes: I agree, that's my expectation as well. Projects that use AI to find & fix vulnerabilities, and strive to harden themselves against attack, will in a few years become VERY hard to attack.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.