Comment by wilkystyle

> are you actively pointing your LLM at the kernel to identify security bugs?

I am not actively pointing my LLM at the kernel in the specific way that would uncover these bugs, and just because it's possible to do so doesn't mean that it has happened already.

> the policy wasn't made on a whim. to quote the linux security team [...]

Great, so let the ones that arise simultaneously do so. What does that have to do with immediately publicizing a vulnerability, regardless of severity, just because an LLM was involved in its discovery?

> the term responsible disclosure is a silly thing made up by vendors

That's certainly an opinion you're welcome to have, but unless you are proposing that responsibility and disclosure are two orthogonal concepts I don't see what that opinion has to do with anything I've said.