TLDR Tech / InfoSec
Coordinated Disclosure in the LLM Age
OSS maintainer Jeremy Stanley highlights the risks that vulnerabilities discovered using LLM tooling may be fed back into the training data and be trivially discoverable by other users. This changes the calculus of coordinated disclosure and embargos as Stanley argues that maintainers should assume that the vulnerability is discoverable. Stanley believes that OSS maintainers shouldn't use LLMs to develop patches or documentation for vulnerabilities that are still under embargo.
Read the full story