

the experiment you are referring to was specifically designed to deceive whereas AI vulnerabilities would just be simple bugs.
In my original comment, I was specifically referring to OpenClaw. Given that it doesn’t live in a vacuum and can be influenced with prompt injection, it’s not safe to assume that whatever bugs it creates aren’t specifically designed to deceive.
Secondly, the security requirements of the Linux Kernel are way more important/stringent than Lutris, which has no special access & is often even further sandboxed if installed via Flatpak.
Sure, but that’s not the point I was trying to make. You said that I don’t trust the guy to audit the code for malicious intent before committing and I gave you a reason why nobody should: if multiple people with decades of experience in a specialized domain can’t catch vulnerabilities disguised as subtle bugs, one guy who isn’t scrutinizing the changes nearly as hard definitely won’t.





It’s maddening but expected.
When corporate decisions are based solely on pleasing investors, fixing a leak isn’t a priority. It might be a long-term investment that eventually pays for itself, but it comes with a front-loaded cost that diminishes the profits of the current quarter.
The only way to get them to care about the problem is if it’s actively unprofitable or comes with personal liability for the leadership, and the only way that will happen is with regulations.
In other words: “why about the survivability of the species when we can instead care about making our investor’s loins tingle?”