secure coding
2 posts
Article
Copilot shipped CWEs in 40% of NYU's 2021 scenarios
Why working AI-generated code still gets rejected in security review: functional correctness is not security correctness, and CWEs ride through clean output.
Article
Linux kernel deleted strncpy across 360 patches
Linux removed strncpy across 360 patches over six years. The exposure: a bounded write primitive used as a safety control it never implemented.