17 bugs in 10 weeks from AI security scanning
Summary
The article discusses AI-powered security scanning that identified 21 bugs in Perfetto's trace processor over 10 weeks, with 17 real issues and 4 not actionable. It emphasizes that many bugs are mechanical and fixable with straightforward patches, while some reveal deeper design problems, and it reflects on triage and the broader implications for OSS security testing. The piece also situates AI-assisted scanning within a landscape of traditional fuzzing and security practices, suggesting a shift toward more scalable, AI-driven security reviews.