Security researcher: AI has commoditized bug discovery, uniqueness now scales with tokens spent
chrisrohlf · x · 2026-11-02
Security researcher chrisrohlf argues that discovering individual vulnerabilities is now a commodity: bugs cheap to find with model tokens will be found and fixed, and collision rates are higher than ever — good news for defenders.
His read on the new frontier:
- Uniqueness scales with tokens spent beyond what everyone else spends on the same code
- Deep knowledge of one target matters less, since the model supplies the expertise
- The scarce skill is deciding which attack surface across vast legacy code deserves the tokens
A sharp take on how AI reshapes offensive and defensive security economics.
More from AGI Musings
- AI optimist concedes doomers were right on cyber risk — maybe extinction risk too — harris_edouard · 2026-11-03
- AI safety debate: unilateral US pause, China dynamics, and SFBay holding humanity's leash — dhadfieldmenell · 2026-11-03
- LLMs solving math gets all the hype, but their new infrastructure patterns for reliable software go unnoticed — StewartalsopIII · 2026-11-03
- Diamandis: Anthropic's Public Benefit Fund lets ordinary people own a piece of AI — PeterDiamandis · 2026-11-03
- EU worker output lags US on AI adoption, and AI capex could squeeze Europe's finances — _akpiper · 2026-11-03
- Fashion models looked AI-proof on paper — but AI gutted the whole agency around them — soumitrashukla9 · 2026-11-03