开源工具
x.com ·
@gdb
OpenAI 称用前沿模型一周发现约千个 Linux 提权漏洞
X 用户 gdb 转述 OpenAI 研究者 Eric Wallace 的说法：OpenAI 正将大量前沿算力用于无偿发现和修补开源代码漏洞。其称在 Linux 内核研究中，一款尚未发布的前沿网络安全模型一周内以约 100 万美元 token 成本发现约 1000 个本地提权（LPE）漏洞，并发现至少 10 类新的 Linux 利用技术；对比此前安全研究者通常一年发现约 20 个 LPE。
AI推荐理由 转述 OpenAI 研究者 Eric Wallace 的说法：将前沿算力投入开源代码漏洞发现与修补，称一周内用约 100 万美元 token 在 Linux 内核发现约 1000 个 LPE 漏洞及至少 10 类新利用技术。信息具体且涉及 AI 安全应用，但为二手转述、无独立验证，'upcoming frontier cyber model' 尚未发布，数据需保留不确定性。
78
正文
additional context on the project:
x.com/Eric_Wallace_/…
Eric Wallace
@Eric_Wallace_
We are now allocating a significant amount of our frontier compute towards discovering and patching vulnerabilities in open source codebases, fully pro bono.
In one case, we studied the Linux kernel, which is a particularly load-bearing piece of software at OpenAI.
Before AI, security researchers might discover ~20 local privilege escalation (LPE) vulnerabilities in Linux in a typical year.
In one week's time, our upcoming frontier cyber model was able to find ~1000 LPE vulnerabilities using about $1M of tokens. In the process, it was able to discover at least 10 novel classes of Linux exploitation techniques.
🔗 View Quoted Tweet