Comment

Comment by no-name-here

>>>> a sandbox that a half skilled human operator could have broken out of easily

>>> Are "half skilled human operators" "easily" able to find zero-day vulnerabilities in a sandbox

>> Calling it zero day makes it sound elusive ... like 40 CVEs this year alone.

> [The CVEs] came from openai or anthropic research? In fact, every CVE in the last 2 years came from the last few months

I still don't understand how you can specifically point to zero CVEs being discovered by humans for year(s), then ~40 being discovered once OpenAI/Anthropic start looking at it, as the only(?) piece of data you provided to support the claim "a half skilled human" could have "easily" found/done this?

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton