Post B5BZr1linJg9NBL3po by yosh@toot.yosh.is
(DIR) More posts by yosh@toot.yosh.is
(DIR) Post #B5BZqsjcNleHM3Hko4 by yosh@toot.yosh.is
0 likes, 1 repeats
I've been seeing a lot of posts in the past two days along the lines of: "Oh those bugs LLMs have found, well a fuzzer would have found them."I don't like that LLMs are able to find bugs. But *obviously* these things will find the lowest hanging fruit first. But that doesn't mean that they can do some real damage on projects that are written in memory safe languages and fuzzed 24/7 either. Exhibit A:https://toot.yosh.is/@yosh/116376054778890780
(DIR) Post #B5BZr1linJg9NBL3po by yosh@toot.yosh.is
0 likes, 0 repeats
I don't like what is happening here. The idea that anyone with a credit card can start farming 0-days is not something I enjoy. But just because I don't like it doesn't mean I'm going to deny it.I'd love to see people try and make the argument that the folks working on Wasmtime don't know what they're doing or should have worked harder. If the Wasmtime folks fail to meet the bar then the rest of the industry does too.