3 ms·
Couldn't you just make it write a PoC?
by sva_ 6mo ago
Couldn't you just make it write a PoC?
- Gregaros 6mo ago[flagged]
- weird-eye-issue 6mo agoStill have to validate it.
- matthewfcarlson 6mo agoI’ve started to see bug bounty programs put flags into the product (see apples target flags https://security.apple.com/bounty/target-flags/ https://security.apple.com/bounty/target-flags/). I wonder if it’s partially to make it easier to validate from an AI perspective
- tptacek 6mo agoYes, you can. I strongly encourage people skeptical about this, and who know at a high-level how this kind of exploitation works, to just try it. Have Claude or Codex (they have different strengths at this kind of work) set up a testing harness with Firecracker or QEMU, and then work through having it build an exploit.