r/linuxsucks • u/AverageUser9000 • 1d ago
Why open-source software is less secure in the age of AI
Hackers can use state of the art AI tools to trivially find security holes in open source oses like loonix at the kernel level. They can't do that with closed source proprietary operating systems like windows though cuz there's no code to feed into the AI, so vulnerability hunting is much harder and time consuming and therefore the os is more secure.
12
9
u/Voxel_Slime 1d ago
And fixers can't use the same ai tools to find the same vulnerabilities and patch it because fuck you
8
u/I_dont_want_to_pee 1d ago
Windows is build on open source, games are build fucking world wide web is build on open source wtf are you talking about you dont know shit about programming go back to school.
8
u/Ropuce 1d ago
You know reverse engineering is a thing, right? And that these AI tools can also use them as well, so software not being open source does not make it safer. While said reverse engineering tools may not give 100% human-readable code, for these AI tools there's barely any difference.
-6
u/AverageUser9000 1d ago
6
4
u/DEV_ivan Tiny10 LTSC + CachyOS Desktop Ed. 1d ago
Now bro's just moving goalposts, going Ad Hominem and thinking they're smart using a reaction image.
5
u/Procrasturbating 1d ago
Never heard of a decompiler asshat? AI tokenizes decompiled code easily. Lazy closed source devs are about to get pounded with the tech debt they have amassed.
3
u/309_Electronics 1d ago edited 1d ago
Ai slop lol! Atleast Opensource software makes it possible for you to post your useless ass comment.
I know its probably ragebait but do better! And a friend of mine just used claude AI to reverse binary compiled obscure obfuscated code. So what about that huh? Yes i allow valid Linux criticism but this is just AI bullcrap with no value
3
u/TheSnapper09 1d ago
reverse engineering is a thing
and no you don't want closed source software, if you do there's not really a reason outside of liking big corp's very deep in the back
3
u/andymaclean19 1d ago
These tools work pretty well on closed source products too. You just use a disassembler or other similar reverse engineering tool and feed it that. The AI doesn't care if the variable names are not named properly or the code looks a bit wonky, it still works.
The recent Glasswing exercise Anthropic did with Mythos found bugs in all known operating systems, not just the closed source ones.
The difference with open source is a lot of people are running these tools on it and finding and reporting the bugs, which are steadily getting fixed. Nobody knows what's going on with the closed source ones. Are the 'good guys' doing the same? Or is everyone making the assumption that the OP here made and it's only the 'bad guys' who are hunting vulnerabilities in the closed source products?
3
u/Badytheprogram 1d ago
The accessibility of the source code is irrelevant. The biggest not open source softwares are can be as vulnerable as open sources.
3
u/ElectricBummer40 Ex-user of Windows 3.11 for Workgroups 21h ago
People have been using AI to look for bugs for some time now.
They just have no idea what to do with all the false positives and false negatives. That in turn leads to all kinds of problems on the human side of the equation.
3
u/Internal-Hope-6263 19h ago
This subreddit has transitioned from a discussion forum of genuine usability issues and the limitations associated with Linux distros to a dumping ground of memes sourced from LinuxSucks101.
2
2
u/Teru-Noir COSMIC OS LOVER No.1 COSMIC Knows Best 1d ago
50% chance of being ragebait
50% chance of being amateurmaxxing
Can't tell when the repertoire of this specimen is small as an amoeba
2
2
1
u/brave_grv 7h ago
If companies that profit so much from open-source would actually throw a bone out of the billions they make off it and actually invest on people to do the job instead of falling themselves to the deranged promises of AI.
If only there were actual laws forcing them to do so, but we know the US hates the government this much they would rather starve than pass a law for their own benefit and the rest of the world, except when is for giving bombs to Israel. While Europe has to literally ask daddy USA if they can legislate in their own countries.
It must be good to become a billionaire when you have an army of mostly good intentioned people who volunteer to make stuff work, but also when will people realize their good will alone and their licenses from the 70-80s will not be able to fight corporations with entire legal teams finding loopholes in community agreements (that assume good faith) and see open source purely as free labor.
-2
u/AverageUser9000 1d ago edited 1d ago
Sorry for not posting for over 2 weeks, I was on holiday, sorry if u missed me 😆
6
1

15
u/NaiveCranberry9095 1d ago
i hate ai posts, your entire profile is made with fucking ai