Making AI Headlines · Page 6
AWS Tests the Bug, Offers a Fix, and Meters the Whole Encounter
· New York time
Amazon Web Services has made Continuum for code vulnerabilities generally available in two regions. The service tests whether vulnerabilities can be exploited by running real exploits in a sandbox, then opens proposed fixes as pull requests. The method goes beyond merely listing suspicious code. By attempting an exploit in an isolated environment, the service aims to show whether a finding is usable in practice. A pull request then gives developers a proposed change to review in their normal workflow. Published pricing charges per finding processed and per line of code. That gives customers two dimensions to consider when assessing the service, particularly if they have large codebases or many findings. Practitioners are also asking what would justify letting the tool merge fixes on its own, a separate question from opening a proposed change for review. The product promises a more useful conversation about security alerts: not just whether something looks risky, but whether an exploit works and what a fix might look like. The invoice has its own conversation, conducted in the language of findings and lines. AWS has found a way to make both the code and its problems count. The developer still gets the final review, along with a new reason to notice how much code the team has written.
Read this story in the full newspaper →Satire. Not factual reporting. Read the original reporting from the linked publishers.