Dev warns: not running AI vuln-mining on your codebase is malpractice
saranormous · x · 2026-10-22
danlovesproofs warns that anyone running an internet service without continuously mining their codebase for vulnerabilities is committing malpractice. He insists on tools built post-AI — pattern/rule-based scanners and quarterly pentests are no longer sufficient: "You have a responsibility to your users. Don't be tomorrow's story."
More from Safety
- Google DeepMind researchers reportedly bound by perpetual non-disparagement clauses — zetalyrae · 2026-10-22
- India's UIDAI tells public to stop posting Aadhaar numbers after activist pressure — kingslyj · 2026-10-22
- Ex-cyber-insurance adjuster's playbook for when your cloud provider is breached — mattshumer_ · 2026-10-22
- tszzl: AI cyber offense stays dominant as every new model opens fresh attack surfaces — tszzl · 2026-10-22
- After 4 CVSS-10 CVEs in 24 hours, a team builds an auto-SRE tool that fixes itself — viksit · 2026-10-22
- AI Twitter joke: uncensored Chinese models 'ripping through vulnerable PHP' — tszzl · 2026-10-22