Author critiques AI companies' cybersecurity marketing narratives
1 Nov 1 4:49 PM · 11d ago · 1 article · 1 post · 2 sources · development 1 of 3
The essay argues that AI companies have exaggerated their role in vulnerability discovery using the php2shell project as an example, where Anthropic, OpenAI, and Wiz each released different narratives about the same work. She contends that LLMs still require human expertise to guide them and cannot independently discover vulnerabilities in major projects like the Linux kernel.
“if you threw an llm at the linux kernel and told it to find an rce without any other guidance, it probably couldn't. you still need skill and experience to guide an llm at the current state”
xyzevaxyzeva Security researcher and developerOpenAI AI companyAnthropic AI companyWiz Security company
The whole story articlespostscomments the bright band is this development · numbered dots are the others · click one to jump
Reported in the same hours no headline names this development itself — these 1 claim were published in its stretch
-
first by HN Frontpage, 11d ago
All 3 developments of Researcher rejects LLMs for her work, citing confident… →
LobstersHacker NewsMastodonNewswires