2026-10-04 07:11 UTC
Look, if you scan code, find an exploit, write a clean patch, and submit it, nobody will give a fuck what scanning software you used.
It is the part after scanning that matters. That’s what people are upset about.
Replies (1)
-
@Thorry@feddit.org 2026-10-04 07:36
Scan code, find an exploit, VERIFY THE EXPLOIT, write a clean patch and submit it. One of the biggest issues with using LLMs for security purposes, is it makes shit up all of the time. So many false positives submitted by people who don’t understand what they are doing is a huge part of why people don’t accept slop security reports any more.