News for hackers. Stuff that matters.
Re:GitHub is investigating unauthorized access to their inte... by hard_times on Thursday May 21, 2026 @06:31AM (#48220399)
I'd say it's different this time, because LLM can form and substantiate opinions of their own, on their own. You could actually assume you have the full source code of any binary for it to analyze, since in theory everything is decompilable, and you could then also diff between releases to save 99% tokens.
Re:GitHub is investigating unauthorized access to their inte... by chris_money202 on Thursday May 21, 2026 @11:36AM (#48224557)
Think this is more an argument against them in security than for them. You don't want the LLM forming the opinion that something is secure when it is not because it has "microsoft" in the name of a binary or something else. There are a lot of ways to mis-direct their reasoning and it's almost impossible to control that 100%. A lot of AI providers are learning from the mistakes, so implies something is going to get hacked once in some unique way and then LLMs won't make the mistake again with 99% certainty.
Re:GitHub is investigating unauthorized access to their inte... by hard_times on Thursday May 21, 2026 @12:23PM (#48225291)
Let's strip all strings then before analysis? to prevent prompt injections and such.