upvote
They literally open by saying Calif used GPT 5.6 Sol, which is a widely available model. Yes, the person driving did more than "find all the bugs", but nowhere does OpenAI imply otherwise.
reply
> It highlights how AI can uncover security flaws with internet-scale impact

> To our knowledge, frontier AI found these vulnerabilities before attackers did

I don't know who/what Calif is and there's no link to them, so if I were only reading this article I would definitely get the impression that "AI did all the work here".

reply
Nobody works without any AI these days, most of us have access to the same models and yet we all do and achieve different things. It's a weird time.
reply
"Nobody works without any AI these days"

i still do. i might be the last one.

reply
Really? No fancy auto complete or the occasional discussion about decisions with an LLM?
reply
Nope, just emacs and man pages, the occasional google search for docs.
reply
[citation needed]
reply
Pure marketing, it's getting increasingly hard to separate actual technical feats of agents from marketing pretentious declarations. Such a terrible environment to navigate right now.
reply
What’s worse is that this is part of a larger strategy of scaring the public to get regulatory capture

It’s just gross and manipulative. You have no moat, get over it

pAtCh ThE pLaNeT today, tomorrow it's creepy rent-seeking behavior

reply
Damned if you do, damned if you don't. Do you prefer they not engage in helping finding vulns at all? Do you not think there are parts of the company interested in security and doing it for the sake of that?

I feel like taking every action these companies take as part of some larger strategy is kind of conspiracy-minded.

reply
Disclaimer: I work as a sec engineer and part of my job includes finding vulnerabilities.

I think the effort is misplaced. We should be exploring ways to make our systems more resilient and I would expect those companies* to focus on that front. Vulnerability research is important, and we should aim to remove as many bugs as we can from our codebases but the pace of software development is increasing and so is the introduction of new bugs.

* I would also expect an increase on relevant research regarding novel paradigms of securing systems.

reply
Why didn't OAI go back to non-profit again?

Where's the conspiracy. There is no moat. The technology is easily reproducible. Deepseek unwound an entire business model yesterday.

reply
Mind elaborating on that Deepseek point? I am aware of the USG decision, what exactly do you mean?
reply
The conspiracy theory is suggesting this is part of a larger strategy. I'm just saying it's a big enough company with a wide enough range of beliefs that I find it pretty likely that the direct motives for this weren't to enable regulatory capture.

But they could be, that's why it's a conspiracy theory.

reply
Suppose it goes like this: part of the company clearly benefits from “AI scary” publicity.

Other parts of the company want to support the public.

The first part of the company backs up the second in internal politics.

Do you consider this a conspiracy? Just seems like “good business” to me. It doesn’t seem as clean as you want to make it seem, though.

reply
deleted
reply
It's not hard tho, the default mode of thinking should be to never trust what a US corporation says.
reply
Why limit only to the US?
reply
US corporations benefit from US corruption and US imperialism. Hard to not think of a more destructive force currently in the world.
reply
Yup, and the rest of the world has no problems. If only we could follow the paradise of the rest of the world!
reply
You’re right overall, but keep in mind that part of the way “US imperialism” works has been to export its corporate style to other countries. This means the infection goes far beyond the US alone.
reply
keep in mind, the point of most views is a toddler who lies about stealing a cooking isn't corrupt, because they're a child and can't do anything.

The same view point is used for racism, dei, and the rest: it doesn't matter if the poor beggar on the corner hates white people. They don't have any means or methods to act on it.

reply
Not marketing. It is a crime related to fraud or securities fraud.
reply
You're claiming this is securities fraud?
reply
Not only that, but everything else is also securities fraud.
reply
What is your argument to say that lying to investors and shareholder is not a crime? It seems a weird position to defend.
reply
They aren't lying, they are saying their tool was used in the process of finding this bug. Was it not?
reply
With this bug, it was not. See above comments.
reply
> Calif identified a critical flaw using GPT‑5.6 Sol as part of our Patch the Planet (opens in a new window) initiative

> 19–24 August 2026: Wiz Research independently collides with the same bug family using Wiz Atlas, Gemini 4 Argon, and GPT-5.6 Sol, reporting its variants on 24 August.

I again ask how they are lying? I get if people hate these companies, but blatantly disregarding what is said helps nobody.

reply
This isn't a security incident as much as it is a marketing opportunity for all these companies.
reply
OpenAI: your misfortune is our PR opportunity
reply
> OpenAI are trying to frame this as if AI did all the work here

CEOs of all big corporations are constantly lying and misleading the public, investors and shareholders. That is a crime. A shame that it is not enforced anymore.

reply
Just more IPO shilling from the scam-man.
reply
Thanks for the "Ski-bi dibby dib yo da dub dub" earworm
reply