Tune in next for "Firefox bug auditors on suicide watch for having to constantly deal with hallucinogenic Ai slop bug and security reports, wasting time. "
Pulse of Truth
Cyber Security news and links to cyber security stories that could make you go hmmm. The content is exactly as it is consumed through RSS feeds and wont be edited (except for the occasional encoding errors).
This community is automagically fed by an instance of Dittybopper.
But how many fake ones did it also find ?
If these are anything like the other AI vulnerability reports I would say there's a tiny chance one of the high severity ones is a minor bug and the others are hot air.
Notably, Claude Opus was much better at finding vulnerabilities than writing software to exploit them. The team ended up spending $4,000 in API credits trying to concoct proof-of-concept exploits, but only succeeded in two cases.
impossible they must have prompted it wrong