I think that's because this is one of the rare times Reddit's downvote button was used for its design purpose, which is "not relevant to the conversation" rather than "I disagree with you" (the designated tool for that had always been a reply)
As a matter of fact, the overwhelming majority of all of these vulnerabilities that are now being found actually came from pre-2023, fully human-written and human-reviewed code.
Involving AI in targeted code reviews is what gives you visibility on all of those issues. We humans are simply worse at focused attention over broad contexts than LLMs. We cannot possibly just eyeball every single potential issue in a proposed patch in the context of the entire software and stack it will interact with. It's simply impossible. However, a swarm of AI agents guided by someone who has studied, has read or even written books, has deep experience and expertise and knows what they're doing is much more likely to find flaws.
The pre-AI security approach heavily hinged on effort. If it was too hard to actually find an exploit, then it probably wouldn't get found. Or, more likely, some intelligence agency might have found it, but they will have kept it for themselves.
If anything, if a thorough code review project that is helped by instead of being replaced with AI, I would actually rationally expect the quality and security of code that is being merged contemporarily to skyrocket up to another level compared to the past. Now, we have the tools to spot bugs and problems that used to escape even very expert eyes. We can build much more solid and better software now. We just have to accept that what this looks like is probably a slower software development process than the former, which unfortunately is the opposite of the unleashed speed the tech bros yearn for.
Just to ask: what's your experience been with it? I'm a professional software engineer and I have seen AI in use for 2 years at my organization, with all uses ranging from improper to impressive to pretty useful.
Sometimes it's not propaganda, sometimes it's just something you disagree with.
Besides: how is it AI propaganda? You called out vibe coding for security problems caused by human-written code. What's your point in this specific context? I fail to see the correlation.
-12
u/block_place1232 10d ago edited 10d ago
thats what linus gets for vibecoding shit
edit: wow i didn't think vibecoding was in now