Post #3793289

2026-07-13 20:46 UTC

You don't see people from the frontier models brag about how many vulnerabilities they FIXED, only how many they FOUND.

Replies (7)

@gary_alderson@infosec.exchange 2026-07-13 22:05

@bagder@mastodon.social that is your job anyways, job security and more satisfaction, ultimately they are mostly helping plug a lot of holes and your product benefits

Open ##3794385
@reftel@mastodon.sdf.org 2026-07-13 21:03

@bagder@mastodon.social The finding is free. The fix is how they hope to make money.

Open ##3794520
@yossarian@infosec.exchange 2026-07-14 08:39

@bagder@mastodon.social I think (hope) patch the planet will correct some of this: https://openai.com/index/patch-the-planet/ (I agree overall to be clear, Python's PSRT is very much swamped with reports.)

Open ##3804232
@gunstick@mastodon.opencloud.lu 2026-07-14 05:29

@bagder@mastodon.social LLMs can't code. They are a super skilled fuzzer, perfect for bug finding. A fuzzer can't produce code.

Open ##3810182
@itgrrl@infosec.exchange 2026-07-19 08:39

@bagder@mastodon.social @daedalus@eigenmagic.net has a timeless toot on this… 👇 https://eigenmagic.net/@daedalus/114621616931526642

Open ##3930258
@seuros@mastodon.bsd.cafe 2026-07-13 21:56

@bagder@mastodon.social Excuse me... I fixed 847 vulnerabilities today with Fable 5 that i introduced myself with Haiku and Found with Sonnet 5 Opus deleted my workspace, so i can't provide screenshots.

Open ##4205068
@dalias@hachyderm.io 2026-07-13 21:57

@bagder@mastodon.social They're also bragging (unintentionally) about how many new vulneabilities they introduced.

Open ##4205071