Science & Health5/10
Engineer Says Subtle Vulnerability Was Patched in an Hour
Oren Yomtov reports that a critical, subtle vulnerability was found by AI-augmented researchers and patched within an hour, with no known attack. He argues well-designed software can still hide such issues that demand deep security experience.
Original post · 1 min read
i just won $200k using this one prompt
Anicet @AniC_deva new critical vuln was found by AI augmented researchers, patched by us 1hr later
this time it was quite twisted, took me a good amount of time to grasp
it was never used to attack us, as far as we can dig
I'm now convinced that even well designed/written software can have so many such small, twisted issues
it takes good experience with vulnerabilities and long chains of actions to suspect, find and exploit them
10yoe+ and solid CS knowledge is not enough
beyond the classic security footguns, that we, software engineers, know about and try hard to prevent
some class of issues, often mo…
♥ 2.3K · ⟲ 121 · 👁 330.3KView on X ↗
