From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code

from blog Simon Willison's Weblog, | ↗ original
From Naptime to Big Sleep: Using Large Language Models To Catch Vulnerabilities In Real-World Code Google's Project Zero security team used a system based around Gemini 1.5 Pro to find a previously unreported security vulnerability in SQLite (a stack buffer underflow), in time for it to be fixed prior to making it into a release. A key insight...