• INeedMana@piefed.zip
    link
    fedilink
    English
    arrow-up
    71
    ·
    15 days ago

    I can’t report because I haven’t validated them yet… I’m not going to send [the Linux kernel maintainers] potential slop

    That’s worth pointing out IMO

    • codeinabox@programming.devOP
      link
      fedilink
      English
      arrow-up
      15
      ·
      15 days ago

      Though that quote is followed by this, which indicates at least five of those vulnerabilities were real:

      I searched the Linux kernel and found a total of five Linux vulnerabilities so far that Nicholas either fixed directly or reported to the Linux kernel maintainers, some as recently as last week:

      • entwine@programming.dev
        link
        fedilink
        arrow-up
        15
        ·
        15 days ago

        I wonder how true that is. The author of this blog post seems to just be taking this guy’s word for it. Did Anthropic actually confirm the bug exists by trying to trigger it on real systems, or are they assuming it’s real because it looks plausible? The report claims you cam do it with two cooperating NFS clients, so did they actually do that, or are they just assuming it’ll work?

        • Aatube@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          12 days ago

          Those are five bugs the kernel maintainers have reviewed and decided to patch (the links are to the commits), not just five bug reports. I think that leans towards “they tested it” or at least “proofed the formal logic in their minds successfully”.