oss-security poster expects repeating waves of AI vulnerability reports
Original title: Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
Martin Steigerwald says fixed AI-found bugs should not be reported again, then harder bugs may follow.
Martin Steigerwald replied on October 18 to the oss-security proposal for a separate vulnerability-reports list. He said forecasts of ever-increasing reports are speculative and that many past models were far off. He expects a wave of AI reports, fewer repeats after fixes, and possibly another wave of harder findings from better models and agents.
Unconfirmed: The expected pattern of AI vulnerability reports is the poster's speculation.
- He calls the volume forecast speculative.
- He expects fixed AI-reported issues not to be reported again.
- He suggests later waves of more difficult findings from better models.
From the original article
Posted by Martin Steigerwald on Oct 18 Greetings. David A. Wheeler - 15.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.