There is something fundamentally contradictory about your entire argument. You claim that AI has become so powerful that it can uncover vulnerabilities experienced developers have overlooked for years. At the same time, you argue that these same AI tools are going to destroy software security because developers are incapable of using them properly. You seem to have missed the most important part: AI does not exclusively benefit people looking for vulnerabilities. It also benefits the people identifying, understanding, preventing, and fixing them. Modern AI systems can analyze large codebases, trace execution paths across multiple classes, identify missing validation, examine trust boundaries, suggest architectural improvements, generate regression tests, and assist with reviewing complex changes. These capabilities are available to defenders just as they are to attackers. And unlike the picture you are trying to paint, experienced developers do not suddenly become irrelevant because someone with an AI subscription can ask questions about source code. Quite the opposite. Developers who understand their systems can use these tools with significantly more context, evaluate their conclusions, recognize false positives, and implement changes without introducing regressions elsewhere. AI is a force multiplier, not a replacement for engineering judgment. You also appear to misunderstand what constitutes a verified security vulnerability. An AI identifying a suspicious method is not proof of an exploit. A plausible attack scenario is not proof that the attack succeeds. Even a proposed patch is not necessarily proof that the original code was vulnerable. A proper security finding requires an identifiable failure, a reproducible scenario, an understanding of its actual impact, and verification that the proposed correction addresses the underlying problem. None of that becomes optional simply because an AI generated the analysis. You have repeatedly claimed to have discovered an extraordinary number of vulnerabilities affecting virtually every available project. You have also accused developers of incompetence, questioned their priorities, and suggested that they charge people for security improvements that supposedly do not exist. These are substantial accusations, yet you expect them to be accepted without independently verifiable evidence. You are free to withhold exploit details. Nobody is asking you to publish instructions that could harm running servers. But withholding evidence also means accepting that others cannot independently validate your conclusions. What is particularly interesting is your assumption that developers working on gameplay accuracy must therefore be neglecting security. Software development does not operate according to that false choice. Gameplay correctness, protocol validation, stability, performance, architecture, and security can all be addressed as part of ongoing maintenance. A commit correcting a skill formula tells you absolutely nothing, by itself, about the security knowledge or priorities of its author. There is another point worth considering. If AI has enabled you to discover problems that you could not previously identify, that demonstrates the potential of AI-assisted development. It does not establish that the developers maintaining these projects lack competence. In fact, your own experience supports the opposite conclusion from the one you are promoting: AI is making sophisticated code analysis more accessible. The same technology can help developers discover weaknesses earlier, investigate them faster, and systematically improve code quality. Naturally, AI-generated code requires review and testing. So does human-written code. Neither has a monopoly on mistakes, and neither deserves blind trust. The meaningful distinction is between disciplined engineering and careless engineering, not between human development and AI-assisted development. Finally, repeatedly announcing that the entire community is heading toward catastrophe contributes nothing measurable to its security. If you possess verified findings, those findings have technical value. If you choose not to disclose them, that is your decision. But the absence of disclosed evidence cannot be turned into evidence that everyone else is incompetent. AI has changed what individuals can accomplish in software engineering. It has not changed the burden of proof. And perhaps the greatest irony here is that the technology you credit with making you capable of discovering vulnerabilities is the very same technology you underestimate when it is placed in the hands of developers who understand the systems they maintain. The future of software security will not be determined by who can generate the most alarming forum post. It will be determined by who can turn increasingly powerful tools into verified, reliable, and maintainable software improvements.
