Post B5yddqU9M3LrAx7s0m by hsza@social.tudbut.de
 (DIR) More posts by hsza@social.tudbut.de
 (DIR) Post #B5ycF58XdyxXQGeA2S by malwaretech@infosec.exchange
       0 likes, 0 repeats
       
       I built an AI that autonomously finds zero day exploits https://www.youtube.com/watch?v=BLqRiL_GY3A
       
 (DIR) Post #B5yckNLjykEOszk5x2 by madduci@mastodon.social
       0 likes, 0 repeats
       
       @malwaretech impressive work, but isn't this kind of corner stone for a new crop of "script kiddies" that might replicate your work and use it fo r bad purposes?
       
 (DIR) Post #B5ycltd1S7uNHoYDwG by NosirrahSec@infosec.exchange
       0 likes, 0 repeats
       
       @malwaretech "Why would you post this up on youtube?"Marcus: It's the best platform for posting videos
       
 (DIR) Post #B5yd7gKHageuOvApnM by jab01701mid@mastodon.social
       0 likes, 0 repeats
       
       @malwaretech The only thing more evil would be Elon Musk posting this here.
       
 (DIR) Post #B5yddqGgA8ZmVAp70y by hsza@social.tudbut.de
       0 likes, 0 repeats
       
       @NosirrahSec @malwaretech I assume that comment means to imply if you’re entering slopsychosis publicising that fact doesn’t do you any favorsUnfortunate to find an unironic sloperator in my follows
       
 (DIR) Post #B5yddqU9M3LrAx7s0m by hsza@social.tudbut.de
       0 likes, 0 repeats
       
       @NosirrahSec @malwaretech And like okay sure post it on youtube but you do know fedi ain’t gonna applaud you for drinking slop right. not very self-concious to link it here
       
 (DIR) Post #B5yddqf8hC8rj2Ge8m by malwaretech@infosec.exchange
       0 likes, 0 repeats
       
       @hsza Please untag me and stop schizo posting in my replies
       
 (DIR) Post #B5yfykZmifziq2rE5Q by aristot73@infosec.exchange
       0 likes, 0 repeats
       
       @malwaretech thank you for the very sane conclusion.
       
 (DIR) Post #B5yhW4aVRCBqPieFiy by themipper@mastodon.social
       0 likes, 0 repeats
       
       @malwaretech this was an informative video. Thanks for being honest about the costs both in tokens and experience needed to get anywhere with the LLM.  You mentioned "fuzzers?" in your video. I assume there are other automated tools that the vulnerability research community is using Today.How do they compare to the LLM pipeline in terms of outcomes, potential and costs?Disclaimer: I am no fan of LLMs but I am always a fan of understanding what is true and what is fiction/marketing.
       
 (DIR) Post #B5ylKSpprQn5xOXRNg by twosky2000@mastodon.social
       0 likes, 0 repeats
       
       @malwaretech tech makes sense as a tool(but not as a service/standalone, triage is a must).Do you know there false positive rate, like keeping stats.It would be interesting getting a number on LLMs tricking user vs. doing the job.
       
 (DIR) Post #B5z5oJAwKzf1ljuyjw by technicaladept@techhub.social
       0 likes, 0 repeats
       
       @malwaretech I was very interested in the part you described as "skipping a step" where the AI found a perfect vuln and you ran with it. But on reflection it found a shortlist and it was your skills in reviewing the shortlist that found the perfect vuln. Reminds me of how people reviewing a cold reading session recalled the accurate information the fake psychic had delivered but were then shown where in the transcript that information was first mentioned and realised that the techniques simply gave them a framework to supply information that the coldreader could then claim credit for knowing.