alper

We're looking into the AI SRE category and I feel most existing setups are kinda far off from being able to do this. For anything you are starting to build now, I think you should start things off from the beginning to work like this.

Even then… if your engineering is good, there aren't that many trivial things that these things can do anyway and for the non-trivial things you need to have a human in the loop.

Is this like Janet?

Wordpress is a toxic property.

The best thing they can do to strengthen security would be to sunset PHP.

There's no need for that many web languages, programming language is not a relevant factor anymore and even it was nobody can seriously argue that writing PHP "makes their heart sing" or some shit.

In those cases this exploit is a blessing because it makes the choice clear: turn it off or get owned

The slop machine can then also port your stuff to Go and you don't worry about this stuff as much anymore.

The marketing around the response I would bet is the main reason why they couldn't keep it secret.

This isn't a security incident as much as it is a marketing opportunity for all these companies.

> How can we help identify and fix vulnerabilities in downstream packages while upstream fixes are pending, or backport fixes to older versions that no longer receive security updates?

Is the company selling a magical code generation machine really asking how it can backport a fix to an older version of the same software?

Is this for real?

Do they consider this an example of a "good" response?

They have to backport this fix or else leave a large part of the internet broken.

Heap use after free?

No excuse whatsoever to not either rewrite your website of PHP or to rewrite PHP itself to Rust.

I thought the Anthropic project did read as a tall order to be completed inside a company from scratch.

What? He couldn't use their internal super powerful AI cyber weapons to create an exploit to hack into the firmware of the conference room device?

This is very bad marketing for OpenAI.