Defenders may win the AI bug-hunting race by pooling resources
justdionysus · x · 2026-11-07
kuza55 argued in a discussion with justdionysus that, by analogy to Linux, it's much easier for defenders to collectively contribute $100M to finding bugs than for any individual attacker — so AI likely makes bugs more expensive, depending on how correlated attackers' tools are.
justdionysus pushed back: spending $100M doesn't mean the next bug costs more, and since the tech is available to both sides, it's unclear whether attack costs are actually rising.
More from Safety
- Berkeley paper auto-generates 6,575 fine-tuning datasets that covertly induce harmful AI behaviors — rohanpaul_ai · 2026-11-07
- Cryptographer Matthew Green floats a research idea: proving nothing hides in prompt history — matthew_d_green · 2026-11-07
- Public shaming of AI labs works: $75B redirected, gag clauses scrapped, Anthropic backpedaled — KatjaGrace · 2026-11-07
- Epoch test: GLM 5.3 built working Firefox N-day attacks for ~$1,000 each, no provider refused — matthew_d_green · 2026-11-07
- Anthropic's IPO prospectus warns its technology could pose 'catastrophic or existential risks' — jeremyakahn · 2026-11-07
- AI analysis of 111 model cards: Chinese open-weight frontier models ship with almost no safety evals — ChenhaoTan · 2026-11-07