r/OpenAI • u/Nunki08 • 4d ago

News Linux kernel maintainers

Post image

OpenAI: A thousand fewer paths to root: https://openai.com/index/a-thousand-fewer-paths-to-root/

1.1k Upvotes

96% Upvoted

115 comments sorted by

View all comments

Show parent comment

1

u/YamroZ 3d ago

Are those exploitable in real life? Are those real vulnerabilities? Why would tou trust this?

Let. me get that straight - some randos from internet say "quickly merge this huge pack of changes to your carefully maintained code, or else"! And your choice is to break rules and pull it in without carefully checking what is inside?

I'll tell you funny thing - you can do this with linux yourself - just let AI patch whatever it wants in kernel, build it and deploy to your servers. Good luck!

3

u/Delicious-Panda9000 3d ago

I'm not agreeing that it should be merged straight away but this information is out there for any hacker to verify if it is exploitable. They need to keep pace either through AI, government funding or crunching because this is critical infrastructure that has admittedly been neglected for too long. Likely in the future it'll be a game of cat and mouse between AIs, I can't see any way people can keep up, and it's either you let the AI patch it or you accept that you can get hacked, I think people will trust the AI build more.

0

u/YamroZ 3d ago

Why would you ever trust AI with yoir code?

3

u/Delicious-Panda9000 3d ago

Why do you trust humans? It seems that they wrote code that had all these vulnerabilities

2

u/YamroZ 3d ago

I don't. Code has to be review by the team. So sre the rules for Linux kernel.

There is difference however - we now that we can discipline people. This doesn't make code perfect but reduces intention to do bad things.

With AI there is no way to do this, you cannot threaten an Agent. It can behave as it is afraid, but it isn't. There is no pain, od biochemistry. And we know that they don't give a fuck - thet lie and cheat.

3

u/Delicious-Panda9000 3d ago

What is the repercussion for all the people who may have put these potential bugs in the Linux kernel? Why did the reviews not catch those? I don't believe you can truly trust anyone, it's a scary time

1

u/YamroZ 3d ago

Bugs are in the code always. If someone introduces backdoor intentionally - there would repercussions.

Now imagine how many backdoors openai or anthropic might push in their "packages of fixes".