YHK - yet another hacker news clone

I Found a $90k Remote Code Execution Vulnerability in Google

30 points soeckly 8 hours ago 11 comments

EdwardDiego 5 hours ago | parent

Bold choice using the noun "I" repeatedly instead of "Claude" - you didn't figure this out, Claude did, and then Claude very obviously wrote the blog post.

Oh, maybe that's why "Claude" was substituted with "I", because Claude wrote this blog post from a first person perspective.

pestatije 4 hours ago | parent

welcome to the club

throwaway260124 1 hour ago | parent

An llm is a tool, I had access to Claude too but I didn’t find the bug. The author found it.

Research taste, among other things are still abilities that differentiate among humans.

In fact, I expect the elimination of other limiting factors by AI to lead to those becoming more important. By the same mechanism that make ugly hedge fund managers more performant.

The problem then is that composition of the top performers will change. Which is problematic since being a top performer ( ‘artist’, ‘researcher’, ‘writer’,..) is often an identity which ‘we often create to protect ourselves: the strong one who never breaks, the intelligent one who is always certain... The mask that once protected you can eventually become the cage that prevents you from changing’

bix6 11 minutes ago | parent

Are you a bot?

xnorswap 22 minutes ago | parent

You are underestimating how much effort and prior knowledge it takes to work with claude on this kind of thing.

cyanydeez 16 minutes ago | parent

I bet, I could take "Trading places" style, anyone off the street, give them a 100 "Secret" word list and they could spend 6 months discovering all sorts of things.

I agree effort and prior knowledge are required, but a few magic words is like 80% of the effort.

mindcrime 8 minutes ago | parent

Well the first 80% is easy. It's the second 80% that really gets ya...

sva_ 16 minutes ago | parent

Shallow dismissals like this contribute nothing to the discussion.

wy1981 14 minutes ago | parent

I could have overlooked but doesn't seem there is a mention of Claude in the blog post? Did author say they had used Claude?

I also am wondering if Claude will proceed on a prompt which is about finding a bug like that? I am not sure, has anyone tried?

stonyrubbish 1 hour ago | parent

Do you have any advice for aspiring bug-bounty hunters? Do you have some method for being able to find vulnerabilities like this, or lots of past experience?