| ▲ | wilkystyle an hour ago | |||||||
No. I have an LLM and didn't discover it. Folks in HR have LLMs but can't produce the same software you can. Just because an LLM could discover it does not mean that it has been discovered yet. Responsible disclosure is still a valuable thing. | ||||||||
| ▲ | john_strinlai an hour ago | parent [-] | |||||||
>I have an LLM and didn't discover it. are you actively pointing your LLM at the kernel to identify security bugs? the policy wasn't made on a whim. to quote the linux security team: "bugs discovered this way [via ai] systematically surface simultaneously across multiple researchers, often on the same day." >Responsible disclosure the term responsible disclosure is a silly thing made up by vendors. | ||||||||
| ||||||||