So what we're learning today is that in the world of LLMs, any time a serious vuln is pre-announced, social media will be flooded with incorrect or incomplete slop about it and make things worse by misleading everyone.
I hate this timeline...
0 Boosts
0 Likes
@lina like, for every entity willing to spend 5+ figures on long-running undirected searches for exploitable bugs that may or may not be out there, there are probably plenty more willing to spend 4+ figures on "this bug exists; quick, go find it"
@lina it kinda feels like even just an announcement of "there exists a bug, here is a description of its severity" is enough for a motivated attacker to throw a bunch of tokens at tracking down the bug [or at least *a* bug of the same class] before the patch drops, even if making the attempt would’ve been compute-prohibitive if they hadn’t already known there was a bug to find