[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID:
<SYBPR01MB6336AEDE4FB0E1EA9BBB6767EE342@SYBPR01MB6336.ausprd01.prod.outlook.com>
Date: Wed, 29 Apr 2026 03:42:56 +0000
From: Peter Gutmann <pgut001@...auckland.ac.nz>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
Subject: Re: Coordinated Disclosure in the LLM Age
Jacob Bachmeyer <jcb62281@...il.com> writes:
>You are correct here: you should assume that any LLM will give a similar
>result to another person who asks a similar question. In other words, LLM-
>discovered vulnerabilities should be considered already publicly known.
Not sure if this makes it better or worse, but I've found that Claude/Opus at
least gives different answers for the same query run over time. If the thing
hasn't fallen out of context yet it'll tell you that we already did this one,
but otherwise it comes up with at least some different stuff each time.
Peter.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
