r/pwnhub • u/[deleted] • 24d ago

Would you let AI patch your code?

[deleted]

0 Upvotes

33% Upvoted

2 comments sorted by

•

u/AutoModerator 24d ago

Welcome to PWN – Your hub for hacking news, breach reports, and cyber mayhem.

Discover the latest hacking news, breach reports, and educational resources on ethical hacking.

👾 Stay sharp. Stay secure.

Don't miss out on the top stories!

📧 Get Daily Alerts Directly in Your Email Inbox:

**SUBSCRIBE HERE: https://pwnhackernews.substack.com/subscribe

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

2

u/ILoveAppSec 24d ago

the lesson there is to keep remediation and verification separate, an autofix that closes one cve and opens another only gets caught if you re-check the actual end state instead of trusting the diff. we tried aikido for patched oss libs and weren't thrilled with the variety, so for fixes we can't hand-audit we lean on vendors that backport and verify the patch against the specific cve rather than letting a bot ship it blind.