Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I found a WordPress RCEs with GPT5.6 and $25

slcyber.io

Post reply on HN
Print view View original

21–30 of 247 posts

Re: I found a WordPress RCEs with GPT5.6 and $25

#21

Post by Philip-J-Fry »

vavkamil wrote: post #2

This one is both awesome and scary. We are living in a black mirror episode, where one well-crafted LLM prompt can get you $500k or the ability to hack into 500M websites :)

One LLM prompt can't get you $500K. Why would someone spend $500k instead of just prompting themselves?

Re: I found a WordPress RCEs with GPT5.6 and $25

#24

Post by inigyou »

Philip-J-Fry wrote: post #21
vavkamil wrote: post #2

This one is both awesome and scary. We are living in a black mirror episode, where one well-crafted LLM prompt can get you $500k or the ability to hack into 500M websites :)

One LLM prompt can't get you $500K. Why would someone spend $500k instead of just prompting themselves?

Because they don't know you can

Re: I found a WordPress RCEs with GPT5.6 and $25

#25

Post by grey-area »

pelagicAustral wrote: post #23
CodeCompost wrote: post #22

I like the idea of not crediting the person who posted the bug but to the LLM that found it. People who find exploits using LLMs should never get a reward or credit.

So people coding with LLMs shouldn't get paid then, right?

That is in fact the end goal of CEOs pushing LLM use yes. Not possible right now, but if it were they would absolutely take that option.

Re: I found a WordPress RCEs with GPT5.6 and $25

#26

Post by nubg »

CodeCompost wrote: post #22

I like the idea of not crediting the person who posted the bug but to the LLM that found it. People who find exploits using LLMs should never get a reward or credit.

I agree! We should go all the way though and credit the authors of the data the LLM was trained on. People who just run LLMs training scripts should never get a reward or credit.
Post reply on HN