3 ms·
You can more easily check for known-vulnerable dependencies
by Retr0id 11mo ago
You can more easily check for known-vulnerable dependencies
- MangoToupe 11mo agoRight, but if you can embed bad packages in LLMs, you can surely embed any kind of vulnerability imaginable.
- Retr0id 11mo agoI'm not thinking about deliberately embedded vulnerabilities, just accidental/emergent ones. The modern equivalent of devs copy-pasting stackoverflow answers that happen to contain SQL injection vulns.
- MangoToupe 11mo agoDoes the distinction make any difference?
- Retr0id 11mo agoYes, you'd take different actions to avoid each.