Remix.run Logo
▲ freecodeio 5 hours ago

can't people just point their AI to the latest pull request that includes the fix and ask it to deduce the vuln?

▲grey-area 5 hours ago | parent | next [-]

Please do and report back here.

▲freecodeio 5 hours ago | parent [-]

I don't indulge in vibe coding shenanigans but seems like the latest pull request would point any AI model where to look.

▲grey-area 4 hours ago | parent [-]

The answer to your original question would appear to be no it is not that trivial.

▲LPisGood 5 hours ago | parent | prev | next [-]

People could point their AI at a physics textbook and ask it to deduce the vuln from first principles too but that doesn’t mean it will be successful.

▲echoangle 5 hours ago | parent | prev | next [-]

If the AI can build an exploit from the patch, sure.

▲freecodeio 5 hours ago | parent [-]

"hey AI, here's my patch for a very critical RCE bug. please test my localhost if it's fixed" secretly uses vulnerable php for localhost

thank me later

▲notnmeyer 5 hours ago | parent | prev [-]

apparently not