undefined | Better HN

0 pointsMangoToupe6mo ago0 comments

Right, but if you can embed bad packages in LLMs, you can surely embed any kind of vulnerability imaginable.

0 comments

3 comments · 1 top-level

Retr0id6mo ago· 2 in thread

I'm not thinking about deliberately embedded vulnerabilities, just accidental/emergent ones. The modern equivalent of devs copy-pasting stackoverflow answers that happen to contain SQL injection vulns.

MangoToupeOP6mo ago

Does the distinction make any difference?

Retr0id6mo ago

Yes, you'd take different actions to avoid each.

j / k navigate · click thread line to collapse