News for hackers. Stuff that matters.
Re:I used o3 to find a remote zeroday in the Linux SMB imple... by Aachen on Sunday May 25, 2025 @10:54AM (#44088286)
Nah. I'm not an expert code auditor myself but I've seen my colleagues do it and I've seen ChatGPT try its hand. Even when I give it a specific piece of code and probe/hint in the right direction, it produces five paragraphs of vulnerabilities, none of which are real, while overlooking the one real concern we identified

You can spend all day reading slop or you can get good at this yourself and be much more efficient at this task. Especially if you're the developer and know where to look and how things work already, catching up on security issues relevant to your situation will be much faster than looking for this needle in the haystack that is LLM output

There are no comments on this comment yet.