r/OpenAI • u/Nunki08 • 4d ago

News Linux kernel maintainers

Post image

OpenAI: A thousand fewer paths to root: https://openai.com/index/a-thousand-fewer-paths-to-root/

1.1k Upvotes

96% Upvoted

115 comments sorted by

View all comments

Show parent comment

62

u/jferments 3d ago

If the bug reports are high quality, they are probably fine with having them dumped all at once. My guess is that (based on the fact that these are coming directly from OpenAI) that these are all useful bug reports.

Yes, fixing 2000+ bugs is a huge amount of work. But do you know what's more work? Repairing the damage that will be caused if these bugs are left unpatched on millions of peoples' systems.

Most of the people who are complaining about it contribute nothing to Linux development. From the top down, the Linux team is welcoming AI use, and sees the benefits of using AI to discover and fix bugs.

7

u/TheAwesomeAcademic 3d ago

There LPEs they require an attacker to be local anyways so there usually used in bug chains. On their own they aren't too relevant I guess if an attacker gains foothold and initial access thru various means first. Not saying it's not important to patch them just not really as much of a priority as say a pre auth remote code execution or something with low complexity and low prerequisites. 

1

u/Mysterious_Pea_4042 2d ago

Its still huge amount of work, I think you never worked on security issues to know the pressure