3 ms·
I mean, both of these are really just lists of mitigations. What would really be useful is why each of these has been developed, what attacks it tries to stop,
by saagarjha 2y ago
I mean, both of these are really just lists of mitigations. What would really be useful is why each of these has been developed, what attacks it tries to stop, why that was chosen as something worth protecting against, and what is out of scope for each of them.
- transpute 2y agoGood LLM prompt seed :)
- saagarjha 2y agoI doubt it. Most humans do a pretty poor job at this already, and LLMs train on things other humans have written. If you have examples to the contrary for a novel mitigation I'd love to see it, but I will also only believe it when I see it.
- transpute 2y agoStill useful for a formatted markdown table based on a specified list of non-novel mitigations.
- saagarjha 2y agoSure, but that’s not what we want here?
- transpute 2y agoThe HardenedBSD list isn't focused on novel mitigations, so LLM summary is possible. For the OpenBSD list, an LLM can help a knowledgeable reader to quickly separate the novel and non-novel mitigations, so that a human can focus on the novel mitigations.