Comment by jrochkind1
3 days ago
I have seen people discussing the fact that AI can literally find an infinite number of bugs. There are always more bugs to be found, whether they would have ever affected any actual real world case or been noticed or not.
> There are always more bugs to be found
A common misunderstanding.
The # of bugs lurking in a codebase is finite. At some point, the only way to find more is introduce fresh bugs through new code.
What we're seeing now is a transition phase where pre-existing bugs are found (and hopefully fixed) at an increased rate.
What makes you think that the number of bugs is finite? There are alternatives to that possibility. A perfect program without bugs might be like a perfect definition of the concept of "chair". Whatever definition you come up with there will likely be edges cases that makes the definition awkward or incorrect, and any definition that takes into account all those cases will not be a particularly good or useful definition.
> whether they would have ever affected any actual real world case or been noticed or not.
That's what I was thinking as well. Wouldn't the majority of the bugs not also have existed in Postgres 18? The version that everyone is using atm...
There is a similar thing with AI detecting vulnerabilities. It's not that the vulnerability isn't real, but just that in most cases for these vulnerabilities to exist there also needs to be a very specific set of circumstances as well making the likelihood of the vulnerability to exist in the wild quite low.
That is obviously not true, and seems like a strange thing to say.