That's quite naive. We're looking at 50 years of legacy software running Unix/Linux environments. If the attacker with an LLM finds one in minutes it might take you hours to even comprehend the finding. Guess what the attacker with the LLM will do in that time?
That, and they flag pretty much any random patch with a CVE these days, making it harder for distro maintainers to keep up.
For this specific "bug" they took care to not mention any security angle in the commit message, making it extremely hard for an outsider to even realize this was a critical patch. I assume this was because they wanted to push the fix without breaking embargo.
I'm pretty sure Ukraine were taking the Russian preparations as what they were. And they had plans to counter them. Proven by the fact that Putin's 3 days war has now surpassed the Russian involvement in WWII.
Over here in Germany, professors' job is "research and teaching". According to the internet, the author's university is a publicly funded university as well. I can see how AI can make you faster on the research side, but you give up 100% of the teaching/developing people part.
As a tax payer, I am very concerned if the people I fund with my taxes to do a job unilaterally declare they are no longer going to do the half of it.
> Here is something that gets lost in all the excitement about AI productivity: most software engineers became engineers because they love writing code.
This resonates somewhat, but for a different reason. My mental model is that there are two kinds of developers, the craftsmen and the artists.
The artist considers the act of writing code their actual fulfillment. They thrive on beautifully written code. They are often attached to their code to a point where they will be hurt if someone criticizes (or even deletes) it.
The craftsman understands that code exists to serve a purpose and that is to make someone's life easier. This can be a totally non-technical customer/user that now can get their work done better. It could be another developer that benefits from using a library we wrote.
The artist hates LLMs as it takes away their work and replaces their works of beauty with generic, templatized code.
The craftsman acknowledges that LLMs are another tool in the toolbelt and using them will make them create more benefits for their customers.
Profiting from selling their patchset is not the whole story, though. grsec was public and free for a long time and there were many effects at play preventing the kernel from adopting it.