The title is pretty self explanatory, but will opensource software become less and less safe compared to “big company software”, as big companies gain access to more and more advanced AI to test for their vulnerabilities? Or even malicious actors gaining access to more advanced AI, able to break into opensource software made by a small team easier? Should a privacy oriented person then stay away from such software?
And, yes … I’m tired of AI, AI, and more AI.
Safer.
Whilst the speed of discovered vulnerabilities and resulting mitigations has been exhausting for all of us, most of those existed before AI and it’s likely that some were being actively exploited already, perhaps for years.
Nation state actors have long been known to have long lists of zero-days and some of those will no longer be available. At some point, this will level out as we patch decades of poor decisions - humans have been making mistakes in software long before LLMs joined the party.
FOSS is getting more attention since the LLM audits can see the source. We don’t hear so much about commercial closed source software’s bugs, since they tend to quietly fix them to protect reputation.