Post by @T156

In reply to 6 earlier posts

@lemmydividebyzero@reddthat.com on reddthat.com Open parent

Death by a thousand slops

@brsrklf@jlai.lu on jlai.lu Open parent

The great thing about asking gen AI to look for problems, is that it's *so helpful* it will create new ones for you. Like arguing for hours that if you were to remove safeguards from your code, it would become unsafe. https://hackerone.com/reports/2298307

Open parent Original URL

@lemmydividebyzero@reddthat.com on reddthat.com Open parent

Luckily, the word "Certainly" is a huge hint that it was generated by AI. You know that the reporter of the "issue" copy-pasted the question of the developer right into the LLM and copy-pasted the output right into hackone.

Open parent Original URL

@TheBlackLounge@lemmy.zip on lemmy.zip Open parent

Hindsight bias. This is from 2023. It’s obvious now. If it still was this easy to spot they wouldn’t have closed the bug bounty program.

Open parent Original URL

@T156@lemmy.world on lemmy.world Open parent

It was volume that was more the issue with the bug bounty program. They were flooded, and recognising it is all well and good, but not if there’s no good way to filter it out. They didn’t have the manpower to keep up.

Open parent Original URL

@TheBlackLounge@lemmy.zip on lemmy.zip Open parent

I encourage you to read some threads linked at the bottom of the article. The AI spammers have become way less obvious, one even has video. The team still checks every issue.

Open parent Original URL

T156 in !technology

@T156@lemmy.world · Mar 02

Right, but the volume was the issue. The cURL team could only work through and verify them so quickly, so the deluge of bug reports just made it impractical for them to dedicate time to sort through it for the Bug Bounty. The idea being that they got rid of the bug bounty, so there was less of an incentive to generate and write a bogus bug report.

View on lemmy.world

Comments (1)

Showing 0 of 1 cached locally.

Syncing comments from the remote thread. 1 more reply is still loading.

Loading comments...

About Community

Technology

!technology@lemmy.world

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

83898

Members

18815

Posts

Created: June 11, 2023

View All Posts