AI found 21 FFmpeg zero-days, some 20 years old; Chrome 149 patched 429 bugs, including 100+ critical/high flaws.
  • richmondez@lemdro.idEnglish
    3 months

    What these articles never say is how many hallucinated bugs the LLM found that either weren’t real or were actually exploitable. The LLM didn’t find these with any confidence it highlighted areas of interest that actual security researchers then needed to investigate and confirm or rule out.

    • hard_zero1@discuss.tchncs.deEnglish
      3 months

      I’m frankly quite annoyed by the amount and extend of anti-AI hate in this community. It almost seems like this is a pure anti-AI rage community. The capabilities and the utility of LLMs are basically always denied or downplayed as much as possible without running into obvious contradictions.

      It would be so nice to have some differentiated and insightful discussions here, about what can or cannot be done with AI, positive and negative impacts it has, possible new use cases, how AI should or should not be used, how the overall benefits of AI can be maximized and the overall negative effects minimized, what the world with AI could be like in the future, …

  • greyscale@lemmy.grey.oooEnglish
    3 months

    What the fuck is a zero day in the context of ffmpeg?

    Its not like its a system service that you can get ingress through…

    “AI found 21 bugs in massive video project” sounds like junior developer shit hungry to get some shit on their resume.

    Even if it wasn’t AI slop, this wouldn’t be impressive.

    • tomalley8342@lemmy.worldEnglish
      3 months

      I imagine there are many web services around the world which use ffmpeg to handle user submitted content.