The xz Backdoor Should Not Happen Again: two ideas on prevention (opens in new tab)

(techblog.bozho.net)

1 pointsbozho1y ago1 comments

1 comments

There's clearly a demand for having an AI go through every public PR in terms of code quality and security. But something generic like ChatGPT-4 doesn't seem to be capable of catching this from just looking at the diffs.

j / k navigate · click thread line to collapse

The xz Backdoor Should Not Happen Again: two ideas on prevention (opens in new tab)

(techblog.bozho.net)

1 pointsbozho1y ago1 comments

1 comments

darthrupert1y ago

There's clearly a demand for having an AI go through every public PR in terms of code quality and security. But something generic like ChatGPT-4 doesn't seem to be capable of catching this from just looking at the diffs.

j / k navigate · click thread line to collapse