GitLab CVSS 10.0 Integer Overflow issue

Re:GitLab CVSS 10.0 Integer Overflow issue by choilive on Wednesday October 21, 2026 @05:51PM (#50188168)

I think this marks the beginning of the golden age. Investments in automated agent driven security scans on all software is coming to every business. Software and infrastructure will become more secure than ever before.

[ Parent | on HN ]

Re:GitLab CVSS 10.0 Integer Overflow issue by hobofan on Wednesday October 21, 2026 @06:11PM (#50188381)

I also hope that we come out in a golden age, but we are very much in for a rough few months/years where all the low hanging fruit is being picked up until we end up with much more hardened systems.

[ Parent | on HN ]

Re:GitLab CVSS 10.0 Integer Overflow issue by eviks on Thursday October 22, 2026 @12:48AM (#50191290)

Why would it be more secure if there is even more investment in automated agent driven insecure code generation that can outpace any scan capacity?

[ Parent | on HN ]

Re:GitLab CVSS 10.0 Integer Overflow issue by riffraff on Thursday October 22, 2026 @02:00AM (#50191700)

If catching "all" security issues becomes feasible then the balance tilts in favor of the projects vs the attackers.

Big malicious entities always had more investments in this than random open source projects.

[ Parent | on HN ]

Re:GitLab CVSS 10.0 Integer Overflow issue by eviks on Thursday October 22, 2026 @02:15AM (#50191799)

Since you need an unrealistic if, I presume you agree that the balance doesn't shift?

[ Parent | on HN ]

Re:GitLab CVSS 10.0 Integer Overflow issue by hnedeotes on Thursday October 22, 2026 @08:10AM (#50194238)

The pig age full speed ahead

[ Parent | on HN ]