AI Revolutionizes Code Fixing
Record surge in security patches and new challenges.
1Record Surge in Security Patches
Microsoft released over 600 Windows security patches in July 2023, up from 60-90 per month last year. Oracle and Linux are following a similar trend. This increase is linked to AI-powered tools accelerating bug detection. However, patches bring their own side effects, complicating software security.
2AI and Bug Hunting
Large language models (LLMs) and humans have become highly effective at bug hunting. They scan old codebases, uncovering long-hidden bugs. Yet, some code written by LLMs is poor quality and makes its way into production. This is exacerbated by marketing pressures and shifting requirements.
3The Changing Nature of Patches
AI is altering the nature of patches. While codebases are continuously refined, new models discover new bug classes. Not all patches fix bugs, and not all bugs are vulnerabilities. CVEs are easy to count but don’t tell the full story. The pressure to release early persists.
4Stellar Evolution Analogy
The future of patches can be likened to stellar evolution. Patch generation acts like fusion pressure, bug generation like gravity. As code evolves, so do bugs and patches. If a code unit can only contain so many bugs, the system may trend toward a white dwarf-like outcome.
5White Dwarf Scenario
In the white dwarf scenario, code becomes a long-lived object requiring no patches. This is a far cry from the days when Windows frequently crashed. However, this is not the industry’s goal. The struggle to write complex, bug-free code continues.
6Supernova and Black Hole Scenario
If code is complex enough, it could face a supernova-like end. Here, the patch model collapses, and production code becomes constantly changing. Daily builds become the product, and you get the latest version every time you run it. This is already seen in cloud applications.
7Cloud Applications and Patches
In cloud applications like Google Docs, you don’t need to patch, but features appear or disappear overnight. This may be the future shape of patches. The increasing power of coding and testing models enables new commercial pressures to modify software continuously.
8Open Source and a Secure Future
Open-source software may offer a safer path in this evolving landscape. Like a constant star, open-source navigation ensures a more secure journey. This could be a crucial option for the future of the software industry.
Original article: www.theregister.com - Articles — Yapay Zeka ile Kod Düzeltme Devrimi