Yes it is. They're not not false positives until they're reported and consume ma... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		tptacek 14 days ago \| parent \| context \| favorite \| on: Claude Code Found a Linux Vulnerability Hidden for... Yes it is. They're not not false positives until they're reported and consume maintainer time.

lambdaone 14 days ago [–]

False positives can be eliminated mechanistically by testing if they actually work, in a sufficiently isolated automated test apparatus.

The hard thing is reducing detected crashes to well-formulated test cases that help rather than hinder maintainers.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact