20 ms·
I was able to browse google and youtube source code in the very very early days. Was only patched when I called up a friend and let him know. And I tried to s
by grepfru_it 3y ago
I was able to browse google and youtube source code in the very very early days. Was only patched when I called up a friend and let him know. And I tried to submit the flaw through normal channels of a supportless technology company but you can guess how well that went...
- tjpnz 3y agoWell that's pure carelessness, isn't it. I'm guessing it was deployed on a server with volume mounts it shouldn't have while possibly running as root?
- __float 3y agoThat seems like a rather specific guess -- plenty of things can go wrong beside that problem. I found the comment more reflective of lacking any reporting process, even for "major" vulnerabilities. These days, companies have turned bug bounties into a marketing and recruiting tool, so it's a very different story.
- jazarwil 3y agoWhat exactly do you think you saw? Bard is not trained on any data of that nature, unless it is already publicly available.
- hospitalJail 3y agoScary how easy people believe the LLMs. I make the same mistakes...
- deleted 3y ago[deleted]
- kalleboo 3y agoYeah it sounds like that curl "bug report" https://news.ycombinator.com/item?id=37904047 https://news.ycombinator.com/item?id=37904047
- deleted 3y ago[deleted]
- sunnybeetroot 3y agoHow do you know it wasn’t a hallucination?
- FirmwareBurner 3y agoBard said "trust me bro".
- grepfru_it 3y agoConfirmed with people at google