DrWhax

@rysiek everyone's mental capacity? :)

@wolf480pl sometimes, sometimes they don't, sometimes one finds a better way to chain vulnerabilities to achieve a certain objective. It all depends a bit on the harness as well, lots of small knobs to twist.

Some benchmarks are available on: https://exploitbench.ai/

@agowa338 I agree and that's unfortunately the shitty side of it.

@glitchypixel I think art should be made by artists and not AI fwiw!

@whvholst maybe things will turn cheap(er) again? I have some doubts about this and there's all kinds of ways to keep prices for components high by the companies and they've done this before and will do it again and they seem to get away with it mostly.

@whvholst it's one crazy rollercoaster right, including after the subsidy for compute ends

@hajovonta I don't think so, that's how LLM's trick you. LLM's are just really good at pattern recognition and have been trained on an endless stream of CTF writeups on how to exploit vulnerabilities. This is why they shine in finding vulnerabilities generally.

@fnrd you're right, but I think if we take this defeatist stance we're not going to improve things for the better.

Unfortunately, we'll not be able to make our own models, we're compute starved, our best bet is maybe open-weights models.

It's all a mess though, I do agree with that.

@FIAR_Light @rysiek yeah that's pretty bad....

@Offbeatmammal @can I think that's accurately describing my view on AI for the past couple months now hehe

@lain @rysiek wait, we can vote for this?

@lain @rysiek nuance on social media????

@Offbeatmammal @can I'm very curious to hear if it helps! If you need help i'm here!

@hughsie I'd love to hear more on the maintainer side of this. What i'm ultimately scared of is that everyone will burn out from the immense amount of stuff maintainers have to clean up.

@rysiek I think we'll get there in a number of years, the way the field is developing now we got all these super fast interconnects and HBM memory and not to mention advancements in the machine learning field.

I almost puke writing this lol

@decapitae Ideally we get more Suhosin's projects for all these different languages, but I doubt it'll happen at this point.

@lain amen

@rysiek human in the loop etc :)

@png sadly, you're right.

@rysiek For sure and the other part is guardrails that currently aren't aligned with the maintainer from these parrots either. Patching is hard or it'll fail because "CYBER"