Paranoia is baseline now: Security in the AI era (opens in new tab)

Paranoid hardening has always been with us: aggressive kernel customizations for bug classes without a proven exploit, while Linux itself had a good-enough disclosure track record. Some of these hardenings became the default, some stayed controversial for a long time. AI-assisted vulnerability research made finding obscure vulnerabilities fast and cheap. So what does good enough even mean in this new era?