you are viewing a single comment's thread
view the rest of the comments
[–] 16 points 1 week ago (5 children)

Here’s an example of the absolute pearls of wisdom Andy is dropping over on Reddit

  • source
  • hideshow 5 child comments
  • [–] 20 points 1 week ago (2 children)

    All of that is reasonable, until the faster part.

    AI tools have been surprisingly good at finding code vulnerabilities. But that should only be an add-on to all the human review. It shouldn't save any time. If anything it should make things take longer, with the AI finding things people didn't, so there's more patching that needs to be done.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 5 points 1 week ago

    I generally agree with you here, particularly regarding the benefits of finding stuff that a manual review may miss.

    The approach I take issue with is the haphazard rush to add AI as part of the development process, almost purely for the sake of it, not on a case by case basis where it is needed (and can be fully tested)

  • source
  • parent