• codeinabox@programming.devOP
    link
    fedilink
    English
    arrow-up
    15
    ·
    5 days ago

    Though that quote is followed by this, which indicates at least five of those vulnerabilities were real:

    I searched the Linux kernel and found a total of five Linux vulnerabilities so far that Nicholas either fixed directly or reported to the Linux kernel maintainers, some as recently as last week:

    • entwine@programming.dev
      link
      fedilink
      arrow-up
      15
      ·
      5 days ago

      I wonder how true that is. The author of this blog post seems to just be taking this guy’s word for it. Did Anthropic actually confirm the bug exists by trying to trigger it on real systems, or are they assuming it’s real because it looks plausible? The report claims you cam do it with two cooperating NFS clients, so did they actually do that, or are they just assuming it’ll work?

      • Aatube@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        2 days ago

        Those are five bugs the kernel maintainers have reviewed and decided to patch (the links are to the commits), not just five bug reports. I think that leans towards “they tested it” or at least “proofed the formal logic in their minds successfully”.