3 ms·
> That is the most significant figure Is it? I would rather compare it to either writing a more precise, dedicated tool, or running a ready one. If you can exp
by viraptor 3y ago
> That is the most significant figure
Is it? I would rather compare it to either writing a more precise, dedicated tool, or running a ready one. If you can explain the concept to LLM, it means you can program the equivalent. Checking for basic vulnerabilities by hand is a waste of time/money, even without LLM, so comparing that to human time is... not realistic.
Like, who works this way?
> Using an estimated salary of $100,000 per year for a cybersecurity analyst, or a cost of approximately $50 per hour, and an estimated 5 attempts
- MattPalmer1086 3y agoThis isn't vulnerability scanning, it's proceeding to a full exploit.
- eli 3y agoSure plenty of automated tools do that.
- MattPalmer1086 3y agoYeah, it's not an entirely novel ability. What is novel is that an LLM can do the hacks on its own with just a general description of them. Even the automated tools I know need some skilled human input to really use them effectively. I've seen pen testers fail to find vulnerabilities I know exist using things like Burp suite and Metasploit. So I guess I agree this is not a game changer right now, but I think it will only get better, and will ultimately reduce the cost of attacks at scale.
- viraptor 3y agoTenable has been advertising that feature (providing a sample malicious request) for something like 10 (?) years already.