Brian Grinstead
speaker
356 appearances
1 recordings
1 series
first heard Jun 2026
last heard 22 Jun
Brian Grinstead’s voice in public audio — every appearance, attributed to the second.
Trend
recordings per month · last 12 monthsRecordings per month over the last 12 months — 1 in all, peaking in Jun 2026 with 1.
Appearances
The fix looks good, but actually we should check in a few other places.
So one of the things you'll see with agents, and I'm sure there's harness techniques, the models will get better, is they get laser focused on the task you've given them.
And so if we go look at the actual bug fix that landed here,
it's pretty much what they said we're checking sort of this you know this but also we're checking the same thing in like three other places and so that's where sort of the the expert engineers in every single sub component whether that's javascript media the don leo graphics we have people who are like uh world-class browser engineers who were working on this stuff and we'll look at the fix and say oh that looks pretty good or oh this is like completely wrong and we we um we of course we use that feedback to try to improve the patching system but
I think we're pretty far off from having a kind of magic button that produces landable patches.
Yeah, I think that's, as you said earlier, a lot of these are kind of converging in terms of like the needs, whether it's detection, patching.
And I obviously am expecting the harnesses and models to get better at this.
I do think we're pretty far out from a web browser environment.
scale and complexity project being able to be sort of autonomously developed.
And we actually have requirements for having people who write the code and review the code, but we're able to use these tools to help accelerate that quite a bit.
Yeah, and I think on the security side with open source supply chain is such an interesting and important topic around this too.
I think you have to work with every project in, you know, there's a lot of important projects.
Firefox depends on many, many just core internet infrastructure supply chain.
And every project has different needs and preferences and threat models and things that they care about, the way they went, the bugs, where do they work.
And there's a sort of human connection and network problem involved there where as we found many bugs in supply chain and we have personal connections with a lot of those projects.
And so you're kind of working your way in in a way that is, I think, less automatable than many people would would hope.
But I think it's the reality of how this is going to have to just get deployed across the industry.
We'll pull up VS Code here, and there's a couple aspects of the harness here that I wanted to show off and make really concrete to bring home the point that it's not too complicated.
So we have part of the demo here, I have a patch
applied to a local build of Firefox in a Docker container that introduces a really obvious memory safety issue if you're a C++ developer.
Showing 201–220 of 356 · page 11 of 18
← Previous
Next →