it’s a bit odd how openai’s blog post makes it sound like security bugs in Linux fall in two categories, info leak and local privilege escalation. i would guess that they probably did also ask their model to find some RCEs, but they’re selling those to exploit vendors (or perhaps to intelligence agencies directly?) rather than blogging about fixing them.
it’s a bit odd how openai’s blog post makes it sound like security bugs in Linux fall in two categories, info leak and local privilege escalation. i would guess that they probably did also ask their model to find some RCEs, but they’re selling those to exploit vendors (or perhaps to intelligence agencies directly?) rather than blogging about fixing them.
That’s terrifying holy shit
Alternatively, many of these exploits are dependent on extremely niche situations that are mostly handled by existing safeguards.
I’d be interested to see the actual real world severity of these - are they actually things that could be used in an exploit in any meaningful way?
RCE is substantially more severe, it’s possible there just aren’t as many, as they aren’t as applicable to highly contrived scenarios