21 sats \ 3 replies \ @nerd2ninja 1 Apr \ parent \ on: Inside the failed attempt to backdoor SSH globally — that got caught by chance security
If you applied such an AI bot to the XZ backdoor and it found it (without including it in your dataset of course) I'd be more enthusiastic. The degree of code obfuscation with this was pretty high to be fair.
write
preview
0 sats \ 0 replies \ @ch0k1 OP 2 Apr
This actually would be an interesting experiment.
Did somebody try to test whether running copilot or any other source code AI tool will identify it as a vulnerability?
reply
0 sats \ 1 reply \ @justin_shocknet 1 Apr
Yea it was buried really good, but that will also result in automating new kinds of tests
reply
0 sats \ 0 replies \ @nerd2ninja 1 Apr
I look forward to it.
reply