Official source this is based on is https://www.ncsc.nl/en/alerts/update-php-vulnerabilities-remain-a-reason-for-immediate-patching, which mentions they’re investigating signs of exploits and that they have at least one confirmed exploit that happened abroad.
It’s still a complex exploit, mind, but not an unusable one.
I mean, the national cybersecurity council here saw exploits happening in the wild. So it’s definitely possible and practical enough for it to happen.
At the architectural level, there’s definitely a difference yes. But at the smaller scoped implementation level the latest models are pretty good compared to humans. Not perfect by any means, sure, but it’s not all drivel anymore. It was 2 years ago, but today’s definitely different.
Race conditions are generally harder to catch, even for human devs. And you’re saying it as if Linus wouldn’t have introduced it had he coded everything by hand, which I don’t think is remotely guaranteed (like he never makes mistakes). And the review system clearly works just fine still.
Good developers can accelerate their work with agents, and you’re right that you can generate tons of LLM-powered slop with it too. But that’s why dismissing anything an agent wrote immediately is also wrong. The review determines if it’s good enough, whether a human or an agent wrote it.
Sure, that’s why I said “not necessarily”. LLMs can be misused and made to do dumb shit too. But I have seen plenty of bullshit come from human developers too.
Verifying LLM code isn’t necessarily harder than verifying a human PR. I hope that this also boosts automated test tooling so that it also gets easier to test these PRs, since the focus will shift to review rather than writing.
They’re required to make a copy to safeguard the data and prevent it from being wiped, but that doesn’t actually mean the request will be honoured and data will be shared. Thus far, police have said no data has actually been transferred pending the review of the request.
They haven’t actually shared anything yet, afaik. When the request comes in the authorities have basically no wiggle room regarding safeguarding the data, but it is only shared once the request is approved as legal.
Criminals don’t own datacenters running the models that actually pose a threat.