<![CDATA[The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all."]]>The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all."

]]>https://board.circlewithadot.net/topic/5463c279-c9d1-46b0-ab56-09ae55e007ab/the-zero-days-are-numbered-https-blog.mozilla.org-en-firefox-ai-security-zero-day-vulnerabilities-the-defects-are-finite-and-we-are-entering-a-world-where-we-can-finally-find-them-all.RSS for NodeFri, 15 May 2026 05:06:24 GMTWed, 22 Apr 2026 07:56:18 GMT60<![CDATA[Reply to The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all." on Wed, 22 Apr 2026 10:26:40 GMT]]>@glynmoody well the early reports sent to the team were mostly and placed an excessive burden on them, so they banned bug reports.

Code scanning has got better in the last few months and now can make interesting and useful insights, though not always security related. I believe the Linux kernel team have found quite a few bugs from recent AI submissions.

The biggest problem is the resources to fix them, many volunteers are overloaded already.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/drajt/statuses/116447877592366014https://board.circlewithadot.net/post/https://fosstodon.org/users/drajt/statuses/116447877592366014Wed, 22 Apr 2026 10:26:40 GMT<![CDATA[Reply to The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all." on Wed, 22 Apr 2026 10:20:01 GMT]]>@drajt more eyes - even ai eyes - are better if reports are good

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/glynmoody/statuses/116447851441330172https://board.circlewithadot.net/post/https://mastodon.social/users/glynmoody/statuses/116447851441330172Wed, 22 Apr 2026 10:20:01 GMT<![CDATA[Reply to The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all." on Wed, 22 Apr 2026 09:59:35 GMT]]>@glynmoody static code analysis found hundreds of bugs in open source projects previously. Finding "bugs" with tools like this is easier than fixing them and stopping new ones creeping in in later changes.

I believe several people have recently reported that AI bug reports have just changed from mostly slop to often useful.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/drajt/statuses/116447771069294173https://board.circlewithadot.net/post/https://fosstodon.org/users/drajt/statuses/116447771069294173Wed, 22 Apr 2026 09:59:35 GMT<![CDATA[Reply to The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all." on Wed, 22 Apr 2026 08:02:44 GMT]]>@floppy yes, probably a hostage to fortune

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/glynmoody/statuses/116447311578099651https://board.circlewithadot.net/post/https://mastodon.social/users/glynmoody/statuses/116447311578099651Wed, 22 Apr 2026 08:02:44 GMT<![CDATA[Reply to The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all." on Wed, 22 Apr 2026 08:01:57 GMT]]>@glynmoody right but … software is a stream, not in a static settled state. The likelihood of never introducing a new bug is zero.

…says he before reading the article. I should go do that.

]]>https://board.circlewithadot.net/post/https://mstdn.fr/users/axx/statuses/116447308517209687https://board.circlewithadot.net/post/https://mstdn.fr/users/axx/statuses/116447308517209687Wed, 22 Apr 2026 08:01:57 GMT<![CDATA[Reply to The zero-days are numbered - https://blog.mozilla.org/en/firefox/ai-security-zero-day-vulnerabilities/ "The defects are finite, and we are entering a world where we can finally find them all." on Wed, 22 Apr 2026 07:57:35 GMT]]>@glynmoody "the defects are finite" sounds like "nobody will ever need more than 640k of memory" to me.

]]>https://board.circlewithadot.net/post/https://mastodon.me.uk/users/Floppy/statuses/116447291361866145https://board.circlewithadot.net/post/https://mastodon.me.uk/users/Floppy/statuses/116447291361866145Wed, 22 Apr 2026 07:57:35 GMT