3 ms·
You're posting this comment on a thread attached to an article where Filippo Valsorda - a noted cryptography expert - used these tools to track down gnarly bugs
by simonw 1y ago
You're posting this comment on a thread attached to an article where Filippo Valsorda - a noted cryptography expert - used these tools to track down gnarly bugs in Go cryptography code.
- tptacek 1y agoThey're also using "AI SAST tools", which: I would not expect anything branded as a "SAST" tool to find interesting bugs. SAST is a term of art for "pattern matching to a grocery list of specific bugs".
- bgwalter 1y agoZeroPath for example brands itself as "AI" SAST. I agree that these tools do not find anything interesting.
- delusional 1y agoThese are not "gnarly bugs".