71 ms·
Say more? It's really hard to navigate the antecedents of this argument.
by tptacek 9mo ago
Say more? It's really hard to navigate the antecedents of this argument.
- viccis 9mo agoPeople who don't do intense security work for a living underestimate the complexity of it. This might find some vulnerabilities, but it's not really capable of producing new methods and attacks. What it replaces isn't a high quality human researcher; it replaces current static code review systems. If AI models never had stack smashing writeups in their corpus, they'd never be able to invent stack smashing.
- tptacek 9mo agoSo, by any reasonable measure, I've spent a career doing "intense security work", with a particular focus in vulnerability research, and I do not agree with this at all.
- viccis 9mo agoWhat evidence do you have? It sounds like you probably haven't been providing much value if an LLM can replace you.