Conversation
corbet

Jonathan Corbet

They say that LLM-generated security reports have gotten much better, so when I got one for the kernel documentation directory, I naturally gave it my immediate, full attention:

"During an automated topological boundary audit of `linux-master (2)`
using Logic Archaeologist Pro (v8.5),
we identified 44 CRITICAL/HIGH Open Topological Manifold(s) in
`Documentation/.renames.txt` that may warrant review."

...evidently they are so much better that I'm no longer in possession of adequate intellectual resources to even understand them. But it sounds bad...

https://lwn.net/ml/all/fde979b5281d3b85cf7a544ba86baadd@ulshe.ai
9
18
29
gezza@mastodon.ie

Gezza

Reply to @corbet

@corbet
blobcataww blobcataww blobcataww

I don't care what the rest might mean. I'm as baffled as you. But anything CRITICAL in renames.txt requires immediate attention. Drop all other bug fixing to start on this.

/irony

0
0
0
bagder@mastodon.social

daniel:// stenberg://

Reply to @corbet

@corbet IMHO, in general they are much better, but there is still some amount of crap coming...

0
0
0
lkundrak@metalhead.club

ENGLISH TEA JESUS 🇺🇦🇨🇿

Reply to @corbet

@corbet i have no idea about computer security and this looks very professional to me

1
0
1
oleksandr@natalenko.name

Oleksandr Natalenko, MSE verified

Reply to @corbet

@corbet Willy's response says it all:

If this is a joke, it's not very funny.
If it's not a joke, you're an idiot.

0
1
0
mathieu@fosstodon.org

Mathieu

Reply to @lkundrak@metalhead.club

@lkundrak @corbet I mean it mentions Manifolds, so at this point all bets are off, you know it must be very very serious

0
0
0
krzk

Krzysztof Kozlowski

Reply to @corbet
@corbet Isn't this just trolling? I think "Mandalic Resonance" nails it.
0
0
1
siddhesh_p@mastodon.social

Siddhesh Poyarekar

Reply to @corbet

@corbet quality of the LLM generated security reports reflect the skill of the engineer submitting them, and the scaffolding they've built out for their analyses. We've seen a spectrum from absolute garbage to clearly elucidated writeups for glibc even in more recent times.

0
0
0
mcdanlj@social.makerforums.info

Michael K Johnson

Reply to @corbet

@corbet I think my favorite part of that whole report is the repeated Mandalic Resonance: 0 Dissonance on every single "finding."

1
0
0
mcdanlj@social.makerforums.info

Michael K Johnson

Reply to @mcdanlj@social.makerforums.info

@corbet Back in the days of yore when I edited Linux Journal, for about its first two years, messages with that kind of intellectual power tended to arrive by paper mail. Typed. Single-spaced, with almost no margins, often on both sides of the paper. Perpetual motion, free energy, aliens; you name it.

I think I still have the folder I kept them in somewhere.

0
0
0
kevin@km6g.us

Kevin P. Fleming

Reply to @corbet

@corbet John Reagan has some splaining to do.

1
0
0
synlogic4242@vivaldi.net

synlogic4242

Reply to @kevin@km6g.us

@kevin @corbet also Leeloo Dallas, multipass

0
0
0
andy

Andy Shevchenko

Reply to @corbet
@corbet Have got something similar on AtomISP driver (which in staging) pointing to some memcpy() calls (IIRC). Archived it, and haven't even bothered to react.
0
0
0
About social.kernel.org

Terms of service

  1. Please do not use this service in violation of the Linux Kernel Code of Conduct. Doing so will result in your account suspension with the referral of the matter to the CoC committee.

  2. "Repeating"/"boosting" someone else's status on this platform will be treated as endorsement and will fall under rule #1.

  3. You are encouraged to use this platform to promote your work on the Linux Kernel, but there is no restriction on permitted topics (with the exception of anything covered by #1 above).

  4. There is no requirement to post in English, but it should be considered the primary language of communication on this platform.

Privacy notice

The admins of this service have access to all posted statuses. They aren't looking, but if it's something they shouldn't know about, then you should not post it on this platform.

Please see the Linux Foundation Privacy Policy, which applies to this platform as well.

Getting your own account

If you would like an account on this instance, please check that the following applies to you:

  • You are listed in MAINTAINERS or CREDITS

  • OR: You have a kernel.org account or email address

  • OR: You have a long and established history of involvement with the Linux Kernel

If the above is true and you agree with the Terms of Service and Privacy Notice listed above, please use these instructions to request an account: