OpenAI Built an AI to Hack Its Own Code—Here’s What It Found скачать в хорошем качестве

OpenAI Built an AI to Hack Its Own Code—Here’s What It Found

Matt Knight spent five years as OpenAI’s CISO. Now he runs what colleagues call “the most interesting job at the company”: leading Aardvark, an AI agent that finds security vulnerabilities the way a human researcher would—by reading code, writing tests, and proposing patches. It recently found a memory corruption bug in OpenSSH, one of the most heavily audited codebases in existence. In this conversation with a16z’s Joel de la Garza, Matt traces the evolution from GPT-3 (which couldn’t analyze security logs at all) to GPT-4 (which could parse Russian cybercriminal chat logs written in slang) to today’s models that discover bugs humans have missed for decades. They also discussed the XZ Utils backdoor that nearly compromised half the internet and why 3.5 million unfilled security jobs might finally get some relief, and how Aardvark could give open source maintainers a fighting chance against nation-state attackers. Timecodes: 00:00 – 00:55 — Intro 00:55 — Introducing Matt Knight: CISO at OpenAI 04:04 — How AI Will Transform Defense 11:56 — How the Model Finds Unfindable Bugs 15:01 — How Matt's Understanding Evolved 17:24 — What is Aardvark? 19:11 — The Aardvark Workflow 21:56 — Who Aardvark is For 23:29 — What Languages Aardvark Works Best With 25:00 — What's Novel About Aardvark? 27:26 — Are we close to replacing human labor? 31:59 — What are these models best at? 36:16 — Will we ever achieve continuous testing? 37:38 — XZ Utils 101 40:24 — Closing Thoughts: Matt's Passion for Open Source If you enjoyed this episode, please be sure to like, subscribe, and share with your friends. Follow Matt Knight on X: https://x.com/embeddedsec Follow Joel de la Garza on LinkedIn:   / 3448827723723234   Follow a16z on X: https://x.com/a16z Follow a16z on LinkedIn:  / a16z   Follow the a16z Podcast on Spotify: https://open.spotify.com/show/5bC65RD... Follow the a16z Podcast on Apple Podcasts: https://podcasts.apple.com/us/podcast... Please note that the content here is for informational purposes only; should NOT be taken as legal, business, tax, or investment advice or be used to evaluate any investment or security; and is not directed at any investors or potential investors in any a16z fund. a16z and its affiliates may maintain investments in the companies discussed. For more details, please see http://a16z.com/disclosures.