• Arthur Besse@lemmy.mlOPM
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    1
    ·
    5 hours ago

    LPEs are not RCEs

    They didn’t say they were, the post is very clear about the the 948 vulns they’re talking about being LPE.

    If it’s a bunch of local jvm consoles or vi escapes into shell

    if it was that, they wouldn’t be “Linux LPEs”. These are clearly kernel bugs they’re talking about.

    And again, stop taking OpenAI at their word about security.

    OpenAI is full of shit about a lot of things but I doubt they’re lying about having working exploits for these Linux bugs.

      • queermunist she/her@lemmy.ml
        link
        fedilink
        arrow-up
        1
        ·
        3 hours ago

        What that tells me is that LLM agents can augment human hackers to perform feets neither could do on their own.

        I don’t know why I would then conclude OpenAI is simply lying about even finding exploits. It’s believable that human programmers, using LLMs, have been able to find exploits. They’re going to lie and give more credit to the Wizard than to the man behind the curtain, but that doesn’t mean the exploits themselves aren’t real.