The zero-days are numbered  | The Mozilla Blog
blog.mozilla.org
Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser.
    • gnufuu@infosec.pubEnglish
      13·
      6 months ago

      Comment score: 10. Impact: An unhandled double meaning can lead to remote laugh initiation.

  • Anarki_@lemmy.blahaj.zoneEnglish
    344·
    6 months ago

    I’m very torn on Mozilla collaborating with not only slop conductors, but crypto bros as well.

    • nandeEbisu@lemmy.worldEnglish
      222·
      6 months ago

      I get the issues with image generation and using text generation in scams etc. but as a professional coding tool (not just vibe coding slop) AI can be extremely helpful certain tasks, and this use case, where organizations just don’t have the resources to have a security expert pore through millions of lines of code for bugs, is a net positive.

      I think this is a case of “don’t throw the baby out with the bathwater” we can absolutely still criticize the industry and specific companies for IP, societal, and environmental concerns but lets not turn away a win just because they’re causing harm elsewhere.

        • Bazoogle@lemmy.worldEnglish
          61·
          6 months ago

          So you code strictly in assembly? If you do, good for you. If you don’t, the I can’t believe you would intentional deskill yourself.

    • viov@lemmy.worldEnglish
      141·
      6 months ago

      That’s why Servo and Ladybird need to be vastly built up

    • kungen@feddit.nuEnglish
      4·
      6 months ago

      Hopefully not, but it makes you wonder how many vulnerabilities they might be introducing by fixing others…

    • redsand@infosec.pubEnglish
      1·
      6 months ago

      I like to think of it as exploit mining or smarter fuzzing and auto chaining. Unlike most of the bullshit uses for AI a high false positive rate really doesn’t matter. A shell is a shell and sorting through a haystack is easier than baling it then sorting through it.

  • Allero@lemmy.todayEnglish
    2·
    6 months ago

    Great news overall, but I feel a bit alarmed about the wording, and whether the post itself is made by a human. This doesn’t look quite like the normal Mozilla writing style. Might just be false trigger, though.