3 ms·
>Auditors though, they are cooked. I think you're massively underestimating the complexity and depth of a good security audit service.
by viccis 8mo ago
>Auditors though, they are cooked.
I think you're massively underestimating the complexity and depth of a good security audit service.
- tptacek 8mo agoI don't.
- viccis 8mo agoGod bless you, the beautiful thing about computer security is that this attitude has kept us happily in business for many years.
- tptacek 8mo agoSay more? It's really hard to navigate the antecedents of this argument.
- viccis 8mo agoPeople who don't do intense security work for a living underestimate the complexity of it. This might find some vulnerabilities, but it's not really capable of producing new methods and attacks. What it replaces isn't a high quality human researcher; it replaces current static code review systems. If AI models never had stack smashing writeups in their corpus, they'd never be able to invent stack smashing.
- tptacek 8mo agoSo, by any reasonable measure, I've spent a career doing "intense security work", with a particular focus in vulnerability research, and I do not agree with this at all.
- viccis 8mo agoWhat evidence do you have? It sounds like you probably haven't been providing much value if an LLM can replace you.