logoalt Hacker News

Marha01 • yesterday at 1:03 PM • 2 replies • view on HN

This situation is temporary.

It is obviously true that there can only be a finite number of serious security bugs in any given software. For a given level of LLM capability, there is a finite subset of these bugs that is actually discoverable and exploitable. Once this finite subset is exhausted, the tide of new vulnerabilities will stop.

Perhaps we will see a few more tides like this, as LLM capabilities advance further. But there will be an end.


Replies

funnybeam • yesterday at 5:55 PM

Is it obviously true? We are talking about Turing machines here and i am absolutely not an expert but i wouldn’t be surprised if there is an infinite number of potential vulnerabilities in most software.

I know there is some kind of mathematical proof that can be done to show the correctness of some software, but is that universally applicable or only in certain situations?

Would love to hear opinions on this from some one more knowledgeable in this area, as the “finite number of bugs” is a statement I’ve heard a lot lately and I’m not sure if it’s actually justified or not

JamesSwift • yesterday at 5:48 PM

Umm, what? Did we just enforce a global codefreeze in perpetuity? Or, even easier, did we just enforce a global codefreeze for the linux operating system in perpetuity? No? Ok, then how do we end up with a finite number of serious security bugs?

➕ show 1 reply