Viewing profile — seanheelan

I honestly hadn’t anticipated someone would think I hadn’t bothered to verify the vulnerability is real ;) Since you’re interested: the bug is real but it is, I think, hard to expl…

Hi, author here. Yes, I built a PoC. Yes, it triggered a KASAN report/crash.

I realised I didn't mention it in the article, so in case you're curious it cost about $116 to run the 100k token version 100 times.

It's certainly not the first vulnerability found with an LLM =) Perhaps I should have been more clear though. What the post says is "Understanding the vulnerability requires reason…