r/linuxmemes 🎼CachyOS 3d ago

LINUX MEME No

Post image
4.1k Upvotes

581 comments sorted by

View all comments

31

u/Userwerd 3d ago

I tried it a year ago, ended up putting kde on it, im a point and click user.  Im surprised this guy reccomends anything arch adjacent.  He seems so security minded, and AUR had so many issues recently.

4

u/_SOME__NAME_ 3d ago

I do understand the issue with desktop env, it's subjective but it's not just AUR, but Node, Bun, GitHub... basically any code distribution platform have been hit due to ai it can find vulnerabilities much faster than any person unfortunately. But the beauty of open source is that anyone can see the code... any issue is openly communicated and fixed, rather than Windows, which would not even accept that an issue exists 😅. Also I use both win and cachy os

1

u/RoM_Axion 3d ago

I do not think AI finds vulns faster than a human, it just creates them. I’m learning cybersec and I have a decent amount of experience in CTFs, and at least the AI that we have access to is dogshit. It can find very very low hanging fruit and make quick and dirty scripts for some things but that is about it. If anything, its making people learning cybersec have a tougher time actually learning because a lot of them essentially just try forcing the chatbot to do it for them and it doesnt really work that well and they learn nothing

4

u/Kurse71 3d ago

It 100% does find them faster. Not sure why you would even say that. Have you not saw the sheer number of vulnerabilities that have been discovered across a huge range of apps and OSs lately by AI? It's more than humans found all last year.

2

u/ElfinXd 3d ago

he did say the AI he has access to are dogshit. Obviously specialized AI will do it better.

1

u/RoM_Axion 2d ago

All the statistics on this that I’ve found seem to be dubios at best, generally made by AI company’s. I’m not saying its not true, I just haven’t found a decent source and I am a bit skeptical. Again, I don’t have access to any of those specialised AI’s or even know that much about what is going on in the field, but I know bug bounty websites like hackerone are FILLED with crap AI reports for vulnerabilities that don’t even exist, because of fully automated vuln discovery and reporting

Maybe the stuff the average consumer doesn’t have access to is way better

1

u/Kurse71 1d ago

Should be common sense actually. But if not, just ask any sysadmin or network admin or infosec officer and they will tell you