3 ms·
I worked in AppSec in the past, made sense to me. Maybe you aren't the target audience? You don't really need manual verification for these, the CVEs (vulnerab
by rohansood15 6mo ago
I worked in AppSec in the past, made sense to me. Maybe you aren't the target audience?
You don't really need manual verification for these, the CVEs (vulnerabilities) are public and can be programmatically validated.
- muldvarp 6mo agoManual verification that the "judge" judges correctly. Also, how exactly do you programmatically validate CVEs?
- rohansood15 6mo agoMost open-source CVEs will have a patch linked in their disclosure. You can get vulnerable code via the git diff, then just verify if it is part of the LLM's finding.