I'm was super glad I could just copy/paste that code in my LLM-of-choice and it gave me a reasonable explanation of how to exploit it. Thank god an attacker couldn't do that.

▲

amluto 6 hours ago | parent | next [-]

This doesn’t require any fancy analysis. You can literally read the password off it — the last bit is an oddly decompiled string comparison.

▲

bryanrasmussen an hour ago | parent | next [-]

Not everybody writes in the language they want to exploit I suppose, that's the great thing about LLMs!

on edit: even though I don't know C or C++ (I suppose it's C but can't be sure) I do think I can figure out what it's doing and how to guess what the password is, so that seems bad.

▲

lifeisloving 3 hours ago | parent | prev [-]

Well most SWEs need an llm to spell their own name now.

	▲	vasco 2 hours ago \| parent [-]
		Claude disagreed with this take but I'm but I'm not sure it's true myself.

▲

imjonse 2 hours ago | parent | prev [-]

The fact that Russia has access to LLMs that could decompile and explain this firmware ( and possibly even translate the explanation to Russian! ) is just another proof that this was definitely part of the hybrid war and Europe needs to spend a few more tens of billions on weapons and possibly impose restrictions on open weight LLMs.

	▲	zelphirkalt an hour ago \| parent [-]
		That's not a solution. Russia can just take the next LLM rolling out of China. The fix is to not be stupid and fix our broken infrastructure. Especially, IT infrastructure, but also things like idiotically Internet-connected fridges of supermarkets apparently.