Comment by freecodeio
11 hours ago
can't people just point their AI to the latest pull request that includes the fix and ask it to deduce the vuln?
11 hours ago
can't people just point their AI to the latest pull request that includes the fix and ask it to deduce the vuln?
Please do and report back here.
I don't indulge in vibe coding shenanigans but seems like the latest pull request would point any AI model where to look.
The answer to your original question would appear to be no it is not that trivial.
People could point their AI at a physics textbook and ask it to deduce the vuln from first principles too but that doesn’t mean it will be successful.
If the AI can build an exploit from the patch, sure.
"hey AI, here's my patch for a very critical RCE bug. please test my localhost if it's fixed" secretly uses vulnerable php for localhost
thank me later
apparently not