logoalt Hacker News

onionisafruittoday at 4:58 PM3 repliesview on HN

The asymmetry part at the end is the frustrating part to me. I've been using Sol for code review in the last week or two. A couple of times during review it's errored out with the cybersecurity message. So it's found something but won't tell me what it is because I'm not on OpenAI's besties list.


Replies

didibustoday at 6:59 PM

I agree, but I will say, I think both Mythos and these OpenAI model find exploits by examining and trying things against the running system, not from looking at the code. I think you'd have to do the same to catch the real vulnerabilities.

ClarityJonestoday at 5:09 PM

And... now it's a vulnerability that OpenAI has for your system, which you paid to provide.

show 1 reply
IshKebabtoday at 5:48 PM

Yeah that's what I don't get. How can they possibly distinguish between good guys trying to secure code they wrote and bad guys trying to attack code they didn't?