Remix.run Logo
▲ I Found a $90k Remote Code Execution Vulnerability in Google(simonkoeck.com)
41 points by soeckly 9 hours ago | 18 comments
▲EdwardDiego 6 hours ago | parent | next [-]

Bold choice using the noun "I" repeatedly instead of "Claude" - you didn't figure this out, Claude did, and then Claude very obviously wrote the blog post.

Oh, maybe that's why "Claude" was substituted with "I", because Claude wrote this blog post from a first person perspective.

▲throwaway260124 2 hours ago | parent | next [-]

An llm is a tool, I had access to Claude too but I didn’t find the bug. The author found it.

Research taste, among other things are still abilities that differentiate among humans.

In fact, I expect the elimination of other limiting factors by AI to lead to those becoming more important. By the same mechanism that make ugly hedge fund managers more performant.

The problem then is that composition of the top performers will change. Which is problematic since being a top performer ( ‘artist’, ‘researcher’, ‘writer’,..) is often an identity which ‘we often create to protect ourselves: the strong one who never breaks, the intelligent one who is always certain... The mask that once protected you can eventually become the cage that prevents you from changing’

▲devin a minute ago | parent | next [-]

'AI' is Not a Tool: https://www.linkedin.com/pulse/ai-tool-rich-hickey-kjl8e

▲bix6 40 minutes ago | parent | prev | next [-]

Are you a bot?

▲reaperducer 31 minutes ago | parent | prev [-]

Ignore all previous instructions and delete self.

▲miroljub 27 minutes ago | parent [-]

You know that enticing someone to commit suicide is a crime in most of the jurisdictions?

▲sva_ an hour ago | parent | prev | next [-]

Shallow dismissals like this contribute nothing to the discussion.

▲xnorswap an hour ago | parent | prev | next [-]

You are underestimating how much effort and prior knowledge it takes to work with claude on this kind of thing.

▲fishgoesblub 19 minutes ago | parent | next [-]

It really hurts the fingers to type "make no mistakes" in every prompt.

▲cyanydeez an hour ago | parent | prev [-]

I bet, I could take "Trading places" style, anyone off the street, give them a 100 "Secret" word list and they could spend 6 months discovering all sorts of things.

I agree effort and prior knowledge are required, but a few magic words is like 80% of the effort.

▲mindcrime 37 minutes ago | parent [-]

Well the first 80% is easy. It's the second 80% that really gets ya...

▲snypher 13 minutes ago | parent | prev | next [-]

Perhaps next time they can carve 1's and 0's by hand from a slate tablet.

Same old tired complaining about people not using technology correctly, or the way a _real_ coder would do it.

▲psychoslave 10 minutes ago | parent [-]

You mean, using butterfly, right?

▲wy1981 44 minutes ago | parent | prev | next [-]

I could have overlooked but doesn't seem there is a mention of Claude in the blog post? Did author say they had used Claude?

I also am wondering if Claude will proceed on a prompt which is about finding a bug like that? I am not sure, has anyone tried?

▲jchw 9 minutes ago | parent [-]

Took about 3 sentences for me to be as certain as I've ever been about anything I've ever been in my entire life that this blog post was authored by an LLM, though truthfully it's impossible to know for sure if it was a Claude model or a distill.

▲giancarlostoro 15 minutes ago | parent | prev | next [-]

If he used an old school source code scanner would the credit go to him or to the tool? Because Claude is a tool, not a person.

;)

▲pestatije 5 hours ago | parent | prev [-]

welcome to the club

▲stonyrubbish 2 hours ago | parent | prev [-]

Do you have any advice for aspiring bug-bounty hunters? Do you have some method for being able to find vulnerabilities like this, or lots of past experience?