48
Why Powerful But Hard To Detect Backdoors Could Become A Routine Problem For Open Source Projects Because Of AI (www.techdirt.com)
submitted 1 year ago by to c/foss@beehaw.org
8 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 1 year ago (3 children)

Not just a problem for open source, surely? The answer is to use AI to scan contributions for suspicious patterns, no?

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 6 points 1 year ago

    there's already a whole swathe of static analysis tools that are used for these purposes (e.g. Sonarqube, GH code scanning). of course their viability and costs affect who can and does utilise them. whether or not they utilise LLMs I do not know (but I'm guessing probably yes).

  • permalink
  • fedilink
  • source
  • parent