Autonomous code analyzer beats all human teams at OSS zero-day competition (opens in new tab)

(theori.io)

8 pointstjbecker3mo ago4 comments

4 comments

This is the kind of advertisement-blog-post that should not have been published until after disclosure. These are quite extraordinary claims and that demands extraordinary evidence.

_aavaa_3mo ago

Why should thy have waited further? Their claims about their performance in the competition are backed by the competition announcements.

tjbeckerOP3mo ago

In the commenter's defense, it's reasonable to be skeptical about the level of autonomy claimed in the post.

We are very eager to share more evidence (including the raw inputs and output artifacts for these bugs) and will absolutely do so as soon as we can.

tjbeckerOP3mo ago

This is fair, and we will gladly share the extraordinary evidence as soon as we can.

If you're curious, we have already released the full traces of finding a sqlite3 0day with an early version of Xint Code (submitted to the AIxCC competition and now open sourced): https://theori.io/blog/exploring-traces-63950

j / k navigate · click thread line to collapse

4 comments

sweetjuly3mo ago

This is the kind of advertisement-blog-post that should not have been published until after disclosure. These are quite extraordinary claims and that demands extraordinary evidence.

_aavaa_3mo ago

Why should thy have waited further? Their claims about their performance in the competition are backed by the competition announcements.

tjbeckerOP3mo ago

In the commenter's defense, it's reasonable to be skeptical about the level of autonomy claimed in the post.

We are very eager to share more evidence (including the raw inputs and output artifacts for these bugs) and will absolutely do so as soon as we can.

tjbeckerOP3mo ago

This is fair, and we will gladly share the extraordinary evidence as soon as we can.

j / k navigate · click thread line to collapse