I was down voted a lot months ago for saying that a lot of open source software had a false sense of being secure with the assumption that someone else would have audited the code. And this AI auditing is going to make the promise of open source software getting audited by others actually real. Nice to see others waking up to this reality.

There was always, in my mind at least, a tension with Linus's Law ("given enough eyeballs, all bugs are shallow").

It's true but the problem is assuming, just because something is open source, it has received sufficient eyeballs. AI now gives us near unlimited eyeballs so, if we survive the bumpy transition, open source should indeed become very secure compared to closed source.

Perhaps it will also challenge the assumption that open source is something you can run a billion dollar business on without re-investing a penny.

a lot of open source software had a false sense of being secure with the assumption that someone else would have audited the code

Do you have examples of people saying this? I don't think I've come across idea being espoused...

I don't agree that it was an assumption as part of open source, but that it was a possibility with open source. However, there are lots of assumptions made about computer software in general - part of the problem is having cognitive models of software that aren't necessarily reflected in how the hardware runs code.

Also, closed source software can similarly be analysed with AI, but there's no guarantee that the company involved will deal responsibly with disclosures.

> ... a lot of open source software had a false sense of being secure with the assumption that someone else would have audited the code ...

I agree on this part, but what's your point here? Are you suggesting closed source is better?

[dead]