undefined | Better HN

0 pointsj2kun1d ago0 comments

> Luckily AI can speed up defenders as well as attackers here, allowing embargoes that would previously have been uselessly short.

This is an important facet of the problem space: security risks turning into an arms race for who wants to spend more tokens.

0 comments

nicce1d ago

One interesting thing is that this makes closed source code even greater asset for the defenders. Attacker cannot spend tokens for it, but defenders can spend tokens for hardening based on source code, while attacker is stuck with blackbox testing.

watusername1d ago

You would be surprised how adept SOTA models are at reverse engineering with IDA/Ghidra or even plain old objdump. Opus basically knows IDAPython on the back of its hand.

nicce1d ago

They can be, but the most interesting parts (backend code, deployment confs) are not usually available. Reversing clients can help to understand a bit, but not with equal level.

1 more reply

j2kunOP1d ago

Decompilation is quite good these days as well

j / k navigate · click thread line to collapse

0 comments

nicce1d ago

watusername1d ago

You would be surprised how adept SOTA models are at reverse engineering with IDA/Ghidra or even plain old objdump. Opus basically knows IDAPython on the back of its hand.

nicce1d ago

They can be, but the most interesting parts (backend code, deployment confs) are not usually available. Reversing clients can help to understand a bit, but not with equal level.

1 more reply

j2kunOP1d ago

Decompilation is quite good these days as well

j / k navigate · click thread line to collapse