lossolo

It goes around in circles because a UAF alone isn't enough in a lot of cases, sometimes you also need a chain (an info leak, read/write primitive etc), a way to defeat ASLR and so on depending on what you are working on and target mitigations. Not all UAFs can be used for RCEs, some can be used only for DoS or for nothing really.

> The exact opposite is true. The only consistently working, stable democracies do not have a single leader of the executive branch, e.g. Switzerland.

That's correlation, not causation. Switzerland made enormous amounts of money from its banking secrecy system over many decades until the US pressured it to end it. And the trends are not looking good for Switzerland based on data. We'll see how stable it remains as the cost of living keeps rising, real wages decline, and unemployment goes up.

If you provide wealth and a good lifestyle to your citizens, then almost any system will be stable.

Very interesting. I see you write about mourning and loss. Could you describe your feelings toward ChatGPT? Would you call it a close, intimate friend that knows how to listen, or do you still treat it as a very clever machine that's good at pattern matching?

Stablecoins like Tether and USDC can freeze funds held in their contracts, they can even destroy funds in blacklisted accounts:

> function destroyBlackFunds (address _blackListedUser) public onlyOwner

> And we know why. It's because of their hostile attitude towards their users.

I used SO almost every day until capable LLMs showed up. I don't remember the last time I used it. SO and similar sites are dead, and LLMs killed them.

The act of theft in my analogy is irrelevant, you can pick theft or any other analogy you like. What matters is that, under the law, there was another unlawful act in that process, one that falls under a different section and constitutes a different crime. That's what makes these cases different. You can agree or disagree with that, but that's how the law works and how it's interpreted.

What matters is how you got it. Accepting a watch someone freely offers you is different from breaking into a house to steal it, even if the watch you were given turns out to be stolen.

Which model and at which effort?

> The first explanation is that they're benign fossils: agent logs from training sandboxes or third-party tools, swept into post-training unscrubbed. One clue fits. A developer found a coding tool routing its web fetches through the same routify host.

Case closed. Everything that passes the rollout ends up in the training data, probably because they don't monitor their rollouts the same way US labs have started to, as they're compute constrained.

> I had an LLM recreate this Tweet and yes, it can make an exploit without reward hacking. It took 5 minutes.

What exactly did you "recreate"? RCE on a stock Docker image based solely on that tweet? In just five minutes? Who's trolling whom here?

I see, okay :) Then it's not wasting money!

Just watch out, because once they've exhausted all the common approaches to bypassing ASLR etc, they'll resort to looping through addresses manually and trying to brute force their way through. So you can learn from their attempts, but only during the "easy" phase.

You're wasting your money. I'd be willing to bet more than the bounty amount that you won't be able to achieve RCE on that site, if you would like to bet.

All the "working" php2shell exploits on GitHub and X are like that. There are ZERO publicly available RCE exploits for php2shell that actually work remotely on production deployments. All of these RCE PoCs are local and rely on unrealistic setups because LLMs couldn't achieve RCE without resorting to reward hacking.