Comment by aussieguy1234

2 days ago

Given these types of security bugs that are being found left and right, I reckon there's going to be an uptick in hiring of software engineers to fix them.

I strongly doubt that. The fixes for most of these are trivial to the point it’s almost automated.

  • The resulting mechanical code change might be trivial. The bugs themselves are often decidedly not.

    You're essentially saying that swallowing a pill is trivial, so therefore pharmaceutical engineering is.

    • For most of these bugs, they occur in a 3rd party software thats easily upgraded.

      I’m saying patching is easy because the pill is delivered to you.

  • There is a push for that, but the fixes (often as little as a one line Dockerfile change in some cases) still have to be tested and verified by a real engineer.

    Otherwise everywhere would have patched already with AI.

I suspect a lot of organisations are already on automated AI detect-patch-redeploy loops for a lot of these types of issues.