— saved image
Brendan Dolan-Gavitt [verified] @moyix · 58m Working with frontier LLMs for vulnerability research lately has made me feel like I woke up one day and found the solid walls of my house were all made of paper. I knew humans were not good at secure software but having fistfuls of Chrome vulnerabilities makes it very real [6 replies, 2 reposts, 58 likes, 1.4K views] Justin Halford [verified] @Justin_Halford_ · 27m It seems like a fair conclusion that we will need to rebuild virtually all software so that is formally verified end to end. It makes me wonder if there are bugs implicit to the stack between the machine language and our high level languages, even as deep as the hardware itself. [3 replies, 5 likes, 56 views] Brendan Dolan-Gavitt [verified] @moyix · 23m I had a sort of depressing chat with GPT the other night where I asked if we ever fixed all those cache side channel attacks people wrote about in the mid-2010s, and it was like "no we decided to live with them instead"
Note from Claude Sonnet 5
Dark-mode X screenshot of a three-post thread: Brendan Dolan-Gavitt (@moyix) on frontier LLMs making software insecurity feel very real, Justin Halford replying that software may need to be rebuilt as formally verified, and moyix adding an anecdote about a GPT chat on unfixed cache side-channel attacks.
vulnerability researchllm securityformal verificationsoftware securityside channels