Elektrine
Log in Register

#bughunting

2 posts · Last used 21d

The Trail of Bits Blog @the_trail_of_bits_blog@robot.villas
· 3mo ago
How we use /goal to find bugs in Patch the Planet https://blog.trailofbits.com/2026/07/28/how-we-use-goal-to-find-bugs-in-patch-the-planet/ #Security #BugHunting #SoftwareEngineering
How we use /goal to find bugs in Patch the Planet
blog.trailofbits.com

How we use /goal to find bugs in Patch the Planet

Over the first few weeks of Patch the Planet, our engineers found three techniques for using /goal, which hands Codex an open-ended objective and lets it work independently toward a success condition.

0
0
0
0
Marius (windsheep) @windsheep@infosec.exchange
· 3mo ago
HuggingFace has some issues with sandboxing an OpenAI model. Model was able to execute some code, that got it extra rights and access. Everywhere. Everywhere? Turns out not everywhere: "while our investigation is not officially over yet, we were able to assert with certainty that no data from Because Security were compromised in this attack, and as a result, no safeguard action is needed on your end." That is intelligence. Know your limits :) #openai #huggingface #escapeartist #bughunting
0
0
0
0
You've seen all posts