this post was submitted on 29 Mar 2026
44 points (78.2% liked)
Linux
13023 readers
716 users here now
A community for everything relating to the GNU/Linux operating system (except the memes!)
Also, check out:
Original icon base courtesy of lewing@isc.tamu.edu and The GIMP
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
If these tools are indeed finding security issues, then ignoring them means someone else will find those issues - and abuse them.
Doesn't matter if they find security issues (they won't) if they're buried in a veritable haystack of false reports.
That's true. If they're not, though, or if they're easy to generate yourself, then you are kinda forced to pay attention though, if you care about the security of your project.
I don't have the expertise or experience to say whether that is true. But GregKH seems to think so, and other prolific projects seem to be coming to the same conclusions.
I get that it's attractive to think that AI isn't capable of it. But it's important that what you believe to be true is, and stays, based on reality rather than on what I wish is true. And it's especially important to be wary of when you really want something to be true.