• quick_snail@feddit.nl
    link
    fedilink
    arrow-up
    20
    arrow-down
    4
    ·
    4 days ago

    It’s worth mentioning that the recent high CVE privilege escalation bugs were discovered by AI.

    There is some good, but it’s important that the submitters include very clear POCs to make verification trivial for maintainers.

    • cm0002@lemy.lolOP
      link
      fedilink
      arrow-up
      1
      ·
      3 days ago

      In the hands of experienced researchers, AI can be good.

      AI is like any other tool, in the hands of an expert for whatever domain they’re using it for, good things can happen.

      But like any other tool, in the hands of an amateur, who knows what could happen lmao