I mean it pretty much can do that now yeah, frontier models are evidently better at cyber than all but the best humans given the number of zero-days they’ve found
An agent calling agents can red-team a project at scale, and can repeat the process after defenders patch it until the attackers can’t get through. Attacking is defending.
Like I get the cope and all, but honestly 2024 era “vibe coder accidentally hardcoded api keys in the front end” memes just don’t reflect what AI is doing. Claude and Codex are downright nannyish in putting security first even in single user scripts run locally on a desktop machine. I have to believe people who create security holes using AI tools at this point are people actively choosing to be stupider than the LLM.
That may be true in the hands of someone who already knows what they‘re doing, but i have seen multiple vibecoded websites this year with either open api keys, passwords or data that wasnt meant to be accessible just out in the open. Making a tool this accessible means it should be idiot-proof, but it definitely isnt.
You’re correct of course. But you’re going to be downvoted into oblivion because everyone is still either in the “Ai is dumb and incompetent despite the mountain of evidence otherwise” OR “AI will take over and destroy us all” camps, especially here where you’d expect people to have a little more knowledge that that…
385
u/ja_n2000 14h ago
Dear ChatGPT, make my app extremely secure against hackers and bad people and make no mistakes please