Pinned post
Psifour
Verified account This account is verified. Learn more@Psifour
383 Following 12K Followers 4.4K Posts
Latest posts 5
Every model tested was capable of identifying the bug using only information from the original reddit post about lost funds (and the related firmware repo).
When coupled with even a passing understanding of HWWs and their options for entropy, the same prompt expanded to allow all tested models to produce a functional PoC that could brute force the complete space.
While I agree with the sentiment, the world has changed and most people have access to at least one model that is capable of one-shotting things like this now. I can't begin to predict what this means for responsible disclosure and incident response standards over the next few years. What a delightfully terrifying time to be alive!
When coupled with even a passing understanding of HWWs and their options for entropy, the same prompt expanded to allow all tested models to produce a functional PoC that could brute force the complete space.
While I agree with the sentiment, the world has changed and most people have access to at least one model that is capable of one-shotting things like this now. I can't begin to predict what this means for responsible disclosure and incident response standards over the next few years. What a delightfully terrifying time to be alive!
I, for one, am reassured that we have autistic developers confirming on a live space to… checks notes… 700+ random listeners that funds are still exposed and readily available to be rugged by a sufficiently advanced script kiddy.View quoted post on X
Great awareness campaign!