Now the bliss is completely forgotten...
15
Replies
0
Boosts
screenshot from our hackerone inbox right now:
@bagder There goes your schedule:
@bagder Huh? 20 in 4 hours?!
@Bubu yeah, its rather so that they have a long list of findings and it takes them some time to submit them on hackerone...
You did sort of issue a challenge :)
@joshbressers @Bubu yeah.
Can I take it back? 😁
@bagder @joshbressers @Bubu "ai so-and-so cannot find vulns" is not a proof of absence. AI systems appear to need some kind of seeding, the structure of the bug that they are looking for. I had some success with prompts such as "we just fixed issue N, are there more issues with the same pattern in this module?"
@huitema @joshbressers @Bubu yeps. As soon as one new bug is found it serves as "inspiration" and suddenly they can find many more in similar style
It is amazing how many bugs a little transfer library can have...
@bagder "Let's rewrite it in Rust!"
@bagder Here's some status icons for your perusal: 💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩💩
I deliberately overprovisioned because I expect more reports to come during the day.
@christopherkunz the only "problem" now is that this new batch is high quality so we need more icons =)
