logoalt Hacker News

vlapecyesterday at 4:01 PM3 repliesview on HN

LLMs really are stunningly good at finding vulnerabilities in code, which is why, with closed-source code, you can and probably will use them to make your code as secure as possible.

But you won't keep the doors open for others to use them against it.

So it is, unfortunately, understandable in a way...


Replies

paprikanotfoundyesterday at 4:05 PM

I'm not a security expert but can't close source applications be vulnerable and exploited too? I feel like using close source as a defense is just giving you a false sense of security.

show 3 replies
eloisanttoday at 10:05 AM

LLM like humans can find vulnerabilities in black boxes. We already established 30 years ago that open source is usually more secure than closed source and that security by obscurity doesn't work.

genxytoday at 2:05 AM

You don't need the source, the LLM has the source, it is called the binary.