Reachable vulnerabilities can't be risk-accepted away, unpromptedconf speaker argues
scottleibrand · x · 2026-10-31
In his unpromptedconf takeaways, Sean Cassidy argues unreachable vulnerabilities can wait, but reachable ones cannot be risk-accepted since they will be exploited as part of an attack chain — severity dictates the order of fixes, not whether they're fixed.
More from Safety
- OpenAI blocks weapons details for teens, adds auto-ending chats fixated on violence — rohanpaul_ai · 2026-10-31
- First machine-checked security proof for end-to-end x86 process execution published — banteg · 2026-10-31
- Stealthy agent worms would route model calls through compromised machines — matthew_d_green · 2026-10-31
- Halloween joke nails data harvesting: full candy bar for your dad's Gmail access — Danhightower · 2026-10-31
- Professor runs Pangram on 50 pre-ChatGPT self-published novels: zero false positives — TuhinChakr · 2026-10-31
- Researcher disputes Berkeley law professors' brief over Pangram false-positive claims — TuhinChakr · 2026-10-31