5 ms·
Here's the thing, all of these problems are pre-existing. All LLMs are doing is shining a big bright light on it.
by sscaryterry 6mo ago
Here's the thing, all of these problems are pre-existing. All LLMs are doing is shining a big bright light on it.
- socratic_weeb 6mo agoWe are talking about drivers for devices from the last century which nobody even uses anymore. This isn't "shining light" on important pre-existing issues that have been ignored for too long or something, it isn't helping. The only problem here, if any, is the false sense of confidence given by LLMs to people who have no business touching kernel code.
- tssva 6mo agoIf they are drivers for devices from the last century which nobody even uses anymore why keep them in the kernel when they, as shown by LLMs, are potential sources of security vulnerabilities? Seems more logical to take the action being taken and remove them.
- skydhash 6mo agoI like OpenBSD for that. If there's something that no one uses and wants to maintain, it's removed. That happened with the bluetooth driver. It was too complicated and no one missed it enough to add it back.
- brookst 6mo agoYou don’t see any issue with insecure drivers for obsolete hardware, exactly the kind of thing that is most prevalent in an industrial control type applications? Stuxnet should have been a wakeup call to everyone: the boring, obsolete, “safe because nobody browses TikTok on it” hardware is exactly the highest risk.
- cestith 6mo agoIf you only need 100 Mbps the 3Com 3c905 series of PCI Ethernet cards are still some of the most reliable hardware you can put into your industrial PC that still has PCI slots. ISDN and ax25 are still really useful if you have low-bandwidth but low-latency needs like sensor data. Now those are niche use cases, but they do exist. However, what’s wrong with removing insecure code for these niche cases? Either someone will step up to actually maintain it, or newer versions of the kernel will be leaner and have less historical cruft.
- jwitthuhn 6mo agoIf the LLMs run by these people are turning up real bugs then their confidence in touching kernel code seems pretty earned, imo.
- segmondy 6mo agowhat do you mean nobody? there are a few of us using it, and we are completely broken when support is taken away.
- literalAardvark 6mo agoSounds like someone should budget for an oss sponsorship
- jononor 6mo agoWith enough tokens, all bugs are shallow? :D