it's the golden age of the white hats. the world has never needed you more. there should be a huge prize pool for finding flaws in civic infrastructure. their work should be strongly protected by statute
I don't take money from any lab. I'm saying this impartially; the number of people on my feed over the last two weeks saying they are switching over to Anth because of Opus 5.5 is like nothing I've seen before. And even if someone does beat Opus, they have Fable 5.5 ready to go.
BREAKING: OpenAI says it found a critical flaw in Brotli, a widely used compression library built into software like Node.js, Bun and Envoy.
The bug could let an attacker take over a system just by sending it malicious compressed data, with no login needed. That works both ways: a hacker could hijack an unpatched server, or a malicious server could hijack an unpatched user’s device.
@Leooo_l0 That black box under the hearth is a classic 1960s British coin-operated prepayment gas meter. You inserted shillings to release gas for the cooker and hot water. Common in modest rented homes like this one. Photo of the Pownall family kitchen in Oldham, 1 June 1962.
in order for there to be any such thing as infosec in the 2030s, AI+human collaborations will need to formally verify hyperproperties of silicon chips from assumptions like “Maxwell’s equations” instead of “Armv9.4-a SAIL”
The only way out is through.
They're calling it the Bugpocalypse. LLMs are being used to find long-hidden cracks in the software infrastructure, and it's happening at a furious rate. 3% of all compromises in computing history happened in the last week, claims one source? I believe it.
There are people saying public access to the frontier models ought to be locked out, or heavily guardrailed, over this. The problem with that idea can be summed up in one sentence: when lockpicks are outlawed, only outlaws will have lockpicks.
The lockpicks will be Chinese open-weight models, if nothing else. There's no way to stop those from becoming ubiquitous.
There are two futures in front of us. One in which only the bad guys have lockpicks, and security holes go undiscovered until they're exploited. Another in which everybody has lockpicks and is aggressively red-teaming their own software so it gets fixed before the holes are exploited.
The corpus of human code is huge but finite. The number of defects in it has to be finite too. We can fix those defects now; we have a million friendly robots to do it with.
The only way out is through.
@staysaasy You see it all the time at amusement parks too, single people or employees using the family room to poop alone. Really should be some kind of fine associated with using the family room without a kid.