• fonix232@fedia.io
    link
    fedilink
    arrow-up
    13
    arrow-down
    5
    ·
    19 hours ago

    OpenBSD, constantly audited for three decades

    Oh buddy… Did you not hear that not only did OpenBSD start using AI for audits but that it actually found a handful of serious issues that decades of human audits have missed?

    • 4am@lemmy.zip
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      1
      ·
      18 hours ago

      There is a difference between an AI doing a security review (which they have become quite accomplished) and generating code that gets committed into the codebase.

      Again, how does one verify that the code it has generated isn’t some verbatim chunk of copyrighted code that it happened to be trained on, and it turned out to be the best fit? There’s no guarantee that a model will not do this, even if instructed.

      Also, content generated by AI models has already been deemed uncopyrightable, and this includes code. So are some larrtsmof the Linux kernel now able to be copied freely without GPL restrictions? How can you license code or executables compiled from said code if you do not hold the copyright on it?

      • fonix232@fedia.io
        link
        fedilink
        arrow-up
        2
        arrow-down
        2
        ·
        5 hours ago

        There is a difference between an AI doing a security review (which they have become quite accomplished) and generating code that gets committed into the codebase.

        I guess I should’ve quoted the whole part, as my primary point was to show that not only did AI spot niche, obscure bugs… it spotted niche, obscure bugs that HUMANS couldn’t.

        Again, how does one verify that the code it has generated isn’t some verbatim chunk of copyrighted code that it happened to be trained on, and it turned out to be the best fit? There’s no guarantee that a model will not do this, even if instructed.

        And what if someone has a genius idea and comes up with a piece of code, completely on their own, and it turns out to be the exact same, verbatim, character by character matching as a copyrighted piece of code?

        What if AI does this? What if the model wasn’t even trained on that piece of code, but, by sheer coincidence, it puts together the same solution because it’s the most obvious and best option?

        Copyright and licensing in code is already a weird topic because mechanical problems often have the same solution. There’s a finite (and in fact, usually very low) number of ways you can run the same algorithm or represent the same data. Say you have to implement a key-value storage system. No requirements on it needing to support millions of entries, historical caching, snapshotting, anything, expectations are simple: a command to add an entry (and update the value assigned to the key, if the key already exists), a command to delete an entry, and a command to get the number of stored items. Wanna bet that if you give this task to 1000 developers of the same language, a large majority will write nearly the same code? Hell, if you don’t consider inconsequential things like variable/field/property/function naming, there’s good chance 90%+ of them will write the same thing. Woukd that be plagiarism though? Would copyright apply?

        On the other hand if you were to write and release a book that is verbatim the same as another, famous book, with the only difference being the names of characters and places… Well I guess you can see where I’m going with this.

        Also, content generated by AI models has already been deemed uncopyrightable, and this includes code. So are some larrtsmof the Linux kernel now able to be copied freely without GPL restrictions? How can you license code or executables compiled from said code if you do not hold the copyright on it?

        You could already copy small enough parts of the Linux kernel without needing to cover yours in GPL. Trivial things for example. Say you have a driver that talks to sone niche hardware in a specific data packet format. Can you copy/recreate that? Or a trivial solution like the aforementioned cache. GPL doesn’t mean you can’t copy a single line of code without your codebase becoming GPL too.

        Oh btw that copyright claim is much weaker than you’d think. It didn’t specify the level of human involvement for example. Also, given the base code is GPL and human written, and GPL applies to all derivative works, it still applies.

      • 0x0@infosec.pub
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        9
        ·
        13 hours ago

        The comment you replied to had absolutely zero to say about licensing and rights issues, yet your entire reply is only about that.

        You lost?

          • bumblebeer@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            ·
            4 hours ago

            Pretty sure that was “lost” as in, “needing a map.” Not everything needs to be about winning or losing.