[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <87340d2y55.fsf@linuxpenguins.xyz>
Date: Thu, 30 Apr 2026 08:35:18 +1000
From: Brian May <brian@...uxpenguins.xyz>
To: oss-security@...ts.openwall.com
Subject: Re: Coordinated Disclosure in the LLM Age
Lucas Holt <luke@...lishgames.com> writes:
> At a minimum, if you're going to go public, use your AI to include a
> possible patch too. Don't just drop work on a random person because you
> got to find it first. That's not cool.
Need to be careful here; simple patches that look good can in fact be
hiding serious security issues.
Thinking of the September 2006 Debian openssl issue here.
https://research.swtch.com/openssl
--
Brian May @ Linux Penguins
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
