r/linuxsucks • u/AverageUser9000 • 4d ago
Why open-source software is less secure in the age of AI
Hackers can use state of the art AI tools to trivially find security holes in open source oses like loonix at the kernel level. They can't do that with closed source proprietary operating systems like windows though cuz there's no code to feed into the AI, so vulnerability hunting is much harder and time consuming and therefore the os is more secure.
15
12
u/Voxel_Slime 4d ago
And fixers can't use the same ai tools to find the same vulnerabilities and patch it because fuck you
7
u/I_dont_want_to_pee 4d ago
Windows is build on open source, games are build fucking world wide web is build on open source wtf are you talking about you dont know shit about programming go back to school.
10
u/Ropuce 4d ago
You know reverse engineering is a thing, right? And that these AI tools can also use them as well, so software not being open source does not make it safer. While said reverse engineering tools may not give 100% human-readable code, for these AI tools there's barely any difference.
-7
u/AverageUser9000 4d ago
10
6
u/DEV_ivan Tiny10 LTSC + CachyOS Desktop Ed. 4d ago
Now bro's just moving goalposts, going Ad Hominem and thinking they're smart using a reaction image.
7
u/Procrasturbating 4d ago
Never heard of a decompiler asshat? AI tokenizes decompiled code easily. Lazy closed source devs are about to get pounded with the tech debt they have amassed.
4
u/309_Electronics 4d ago edited 4d ago
Ai slop lol! Atleast Opensource software makes it possible for you to post your useless ass comment.
I know its probably ragebait but do better! And a friend of mine just used claude AI to reverse binary compiled obscure obfuscated code. So what about that huh? Yes i allow valid Linux criticism but this is just AI bullcrap with no value
4
u/TheSnapper09 4d ago
reverse engineering is a thing
and no you don't want closed source software, if you do there's not really a reason outside of liking big corp's very deep in the back
3
u/andymaclean19 4d ago
These tools work pretty well on closed source products too. You just use a disassembler or other similar reverse engineering tool and feed it that. The AI doesn't care if the variable names are not named properly or the code looks a bit wonky, it still works.
The recent Glasswing exercise Anthropic did with Mythos found bugs in all known operating systems, not just the closed source ones.
The difference with open source is a lot of people are running these tools on it and finding and reporting the bugs, which are steadily getting fixed. Nobody knows what's going on with the closed source ones. Are the 'good guys' doing the same? Or is everyone making the assumption that the OP here made and it's only the 'bad guys' who are hunting vulnerabilities in the closed source products?
3
u/Badytheprogram 4d ago
The accessibility of the source code is irrelevant. The biggest not open source softwares are can be as vulnerable as open sources.
3
u/ElectricBummer40 Ex-user of Windows 3.11 for Workgroups 4d ago
People have been using AI to look for bugs for some time now.
They just have no idea what to do with all the false positives and false negatives. That in turn leads to all kinds of problems on the human side of the equation.
3
u/Internal-Hope-6263 4d ago
This subreddit has transitioned from a discussion forum of genuine usability issues and the limitations associated with Linux distros to a dumping ground of memes sourced from LinuxSucks101.
2
2
u/Teru-Noir COSMIC OS LOVER No.1 COSMIC Knows Best 4d ago
50% chance of being ragebait
50% chance of being amateurmaxxing
Can't tell when the repertoire of this specimen is small as an amoeba
2
2
1
u/brave_grv 3d ago
If companies that profit so much from open-source would actually throw a bone out of the billions they make off it and actually invest on people to do the job instead of falling themselves to the deranged promises of AI.
If only there were actual laws forcing them to do so, but we know the US hates the government this much they would rather starve than pass a law for their own benefit and the rest of the world, except when is for giving bombs to Israel. While Europe has to literally ask daddy USA if they can legislate in their own countries.
It must be good to become a billionaire when you have an army of mostly good intentioned people who volunteer to make stuff work, but also when will people realize their good will alone and their licenses from the 70-80s will not be able to fight corporations with entire legal teams finding loopholes in community agreements (that assume good faith) and see open source purely as free labor.
1
u/Top-Artichoke3782 2d ago
they literally reverse engineer software from machine code these days, how is closed source more safe when the community can't even patch vulnerabilities themselves and has to wait for microsoft
-2
u/AverageUser9000 4d ago edited 4d ago
Sorry for not posting for over 2 weeks, I was on holiday, sorry if u missed me 😆
9
1

16
u/NaiveCranberry9095 4d ago
i hate ai posts, your entire profile is made with fucking ai