@rysiek I really don't know what to make of that without taking a deep dive into the contents of the CVE assignments.

Internally among the kernel folks, there is a faction that very much wants to accept slop, and inflating the number of CVEs serves a narrative that they "need AI tools" to deal with the volume. I don't have any evidence that this is what's going on, but I'd be stupid to disregard the possibility.

The core problem right now is that we have a crisis of inability to trust large portions of the people we used to assume we could trust.

@rysiek i'm never sure how to say this in a way that sounds convincing but linus, ingo, and essentially the entire power structure of the linux kernel have knowingly signed off on modifications introducing vulnerabilities which use a variety of tactics to evade notice including the abuse of git features such as backdating as well as inserting them within large swathes of other legitimate commits from the same contributor. module signature verification with ML-DSA was backdoored in march using a combination of these steganographic techniques and linus unambiguously and knowingly accepted it.

@rysiek Cats, however, are flawless entities incapable of making mistakes!

@rysiek The issue isn't the language. The issue is the kernel's lack of any internal privilege boundaries. A memory safe language does not fix logic bugs in the implementation of memory/resource management. You fix this shit with an MMU not with language choice.

@rysiek I'm allergic to rust. It's a sign of AI related corrosion