seanheelan

5 ms·

1. 1.▲
   by seanheelan 1y ago

   I honestly hadn’t anticipated someone would think I hadn’t bothered to verify the vulnerability is real ;) Since you’re interested: the bug is real but it is, I think, hard to exploit in real world scenarios. I haven’t tried. The timing you
2. 2.▲
   by seanheelan 1y ago

   Hi, author here. Yes, I built a PoC. Yes, it triggered a KASAN report/crash.
3. 3.▲
   by seanheelan 1y ago

   I realised I didn't mention it in the article, so in case you're curious it cost about $116 to run the 100k token version 100 times.
4. 4.▲
   by seanheelan 1y ago

   It's certainly not the first vulnerability found with an LLM =) Perhaps I should have been more clear though. What the post says is "Understanding the vulnerability requires reasoning about concurrent connections to the server, an
5. 5.▲
   How I used o3 to find a remote 0-day vulnerability in the Linux kernel (ksmbd)(sean.heelan.io)

   17 points by seanheelan 1y ago|4 comments
6. 6.▲
   Finding 10x+ Performance Improvements in C++ with CodeQL(sean.heelan.io)

   1 points by seanheelan 4y ago|0 comments