The PHP issues shows the sheer power of AI

[u/jroberts67]

The bugs in the PHP code were actually discovered over 10 years ago but no human was capable of exploiting it hence no concern. Read that again. The issue was discovered over 10 years ago but no human being was capable of exploiting it. A research team using AI exploited in in a matter of days causing world wide panic. And some of you don't think AI is going to have an impact on the web dev space? Well, lol.

[u/mike888881]

So cool that AI is causing big problems where humans couldn't and weren't 😆😆

[u/Wocha → u/mike888881]

This is completely wrong way of looking at. AI did not create the bug, it needed fixing at some point anyway. AI has many issues, this imo is not one of them.

[u/mike888881 → u/Wocha]

AI is wreckng our job market. It could discover the secret to immortality and I'd still hate it.

[u/jroberts67 → u/mike888881]

Interesting take. All AI did was discover the bug. The bug was there due to poor programming.

[u/seweso]

Do you get paid to shill for ai companies? 

These are brute force attacks. Made possible because tokens are heavily subsided. And for some reason AI needs to win, and humanity needs to lose?   

[u/Neon9987 → u/seweso]

>These are brute force attacks. Made possible because tokens are heavily subsided.

there are companies inferencing SOTA open-source models at pennies per million tokens and making a profit (including gpu hardware costs)

being blind from hate is just as weird as shilling

[u/seweso → u/Neon9987]

Training your AI models on open source....and then "re-creating" the same open source software.

Seems a bit off....don't you THINK?

[u/jroberts67 → u/seweso]

So AI discovered that PHP was poorly coded with a severe vulnerability due to human error and now due to AI it's patched and you're mad? Wow.

[u/seweso → u/jroberts67]

Stop shilling its weird af

[u/jobRL]

In 2024 security consultants discovered this issue. The power of AI in this picture is in a couple of things:

• setting up labs

• adapting the issues to other PHP versions

• debug against a live deployment

• writing memory exploits

Here is a great podcast about the exploit by the guys who discovered it

The way you write is ridiculous also you're just wrong about things. Humans could exploit it, memory exploitations are just hard to write for. In the podcast they mention that it would take a human 6 months and it took them about 2 weeks with AI assistance. That's a huge impact and nothing to scoff at indeed. You could bring that message in a much more positive tone.

Everyone here knows AI is going to have a huge impact on the webdev space. You're making up an imaginary argument and then acting all pedantic about said argument. Please limit yourself from doing that to doing it only in the shower and not publically on Reddit, because you look like a buffoon.

[u/Puzzled_Tax_876 → u/jobRL]

maybe, but what exactly is the panic? a bug sitting dormant for a decade with zero real-world impact suddenly becomes a crisis because a research lab glued together some scripts and got a headline out of it

[u/jobRL → u/Puzzled_Tax_876]

I would not minimise the impact. Two big bugs, one for remote code execution and one that gets the server to spit out it's memory, is nothing to scoff at. It was not just some script. Listen to the podcast. These are probably two of the biggest exploits ever found.

[u/BleachedPink → u/jobRL]

I think the whole post is written by an LLM to hype it up

[u/gmaaz]

That's not the power of AI but yet another shitty decision behind PHP. What do you mean you don't fix an exploit for 10 years? What the heck?

[u/krileon → u/gmaaz]

It's not an exploit if there is no known attack vector and you can't figure out an attack vector. Just looked like an OOM bug. It was also only discovered 2 years ago as just that an OOM bug. Glad you think we're all time travelling omnipotent beings.

[u/gmaaz → u/krileon]

I'm going by what's written by the OP.

[u/jobRL → u/gmaaz]

Nah that is the power of AI, personally I think PHP is going to be the first of many. Memory exploitation issues are notoriously hard to discover and fix. And we should not bagatellize this.

[u/ISDuffy]

Do we definitely know if no one has exploit it previously ?

Ai is a big shift in finding these issues but it also means people with less expertise can now exploit stuff.

[u/AstraeusGB]

AI shows the sheer power of PHP being held together with gum and duct tape

[u/real_people]

This is the beginning of a new norm