cstanhope@social.coop ("Your weary 'net denizen") wrote:
I routinely find bugs in code when I wade into code bases I am unfamiliar with and start reading. And I'm just one person and not a fleet of excess data centers running analysis software pointed at all the world's code.
Anyway, I suspect decades of putting time to market, performance, or profligacy ahead of most other concerns is biting us. That, and all the previous software being written in a time prior to billionaire money being spent to automate finding vulnerabilities.
(Just think what we could've done if we had put even a fraction of that effort in *before* now.)
As usual, guard yourself against hype: