• Holytimes@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    7
    ·
    2 days ago

    When decade after decade the general solution to low effort spam bug reports was mostly just ignore it till it goes away cause people are lazy. Its not surprising it’s suddenly a massive problem when the barrier to entry to make a bug report dropped though the floor.

    No one has ever bothered to figure out a proper solution to the problem. So kicking the can down the road is biting everyone in the ass at the same time.

    Over the last 20 years every time iv seen devs bitch about spam bug reports iv always wondered why no one ever tries to find a long term reliable method to dealing with it. At best you see token efforts. Kinda funny to be honest.

    • saltesc@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      15 hours ago

      He then offered an opinion on how best to use AI to improve software security.

      “AI tools are great, but only if they actually help, rather than cause unnecessary pain and pointless make-believe work,” he wrote. “Feel free to use them, but use them in a way that is productive and makes for a better experience.”

      “The documentation may be a bit less blunt than I am,” he added, “but that’s the core gist of it.”

      “So just to make it really clear: If you found a bug using AI tools, the chances are somebody else found it too. If you actually want to add value, read the documentation, create a patch too, and add some real value on top of what the AI did. Don’t be the drive-by ‘send a random report with no real understanding’ kind of person. OK?”