However easy this bug was to find, potential attackers are doing a similar exercise about how likely they are to find a bug and how much it might gain them before they bother looking. 

AI not only made them better at finding bugs conditional on looking, it made them more likely to look too.

Undisciplined

The assumption that somebody would have found the vulnerability if it existed is framed incorrectly. The better assumption would be that if there were a sufficiently easy to find vulnerability it would have been found.

I think that's what got me thinking about it.  The bug seems like the kind of thing that 

It's not a bug that's only reproducible under certain hardware configurations, or special circumstances.  It's literally just a simple logic problem in the code itself.

That's what got me wondering about the actual density of eyes on any of the stuff we rely on.

security

bitcoin

econ

Pleb Economist #13: ColdCard and the Law of Large Numbers

SimpleStacker

> The assumption that somebody would have found the vulnerability if it existed is framed incorrectly. The better assumption would be that if there were a sufficiently easy to find vulnerability it would have been found.

I think that's what got me thinking about it.  The bug seems like the kind of thing that *should* be caught easily.

It's not a bug that's only reproducible under certain hardware configurations, or special circumstances.  It's literally just a simple logic problem in the code itself.  

That's what got me wondering about the actual density of eyes on any of the stuff we rely on.