Eliminating DoS bugs with ChatGPT: profiling 3,000 code sites and building a resource ledger

jd_pressman · x · 2026-11-15

jdpressman details a workflow to empirically eliminate DoS bugs from a web server using ChatGPT: have it write a profiler to find every request-path location where an attacker-controlled resource could cause a DoS, test under load with deployment benchmarks, manually categorize 3,000 locations, then build a formal resource ledger proving no data structure can be pushed into a DoS state—letting the model find and patch remaining flaws. The attached screenshot shows ChatGPT triaging a low-severity SSHA salt issue with a concrete fix. The author argues formal verification's real value is shrinking the search space so red teams attack the most vulnerable spots first.

Related event: Using ChatGPT to profile and eliminate DoS vulnerabilities(2 posts)→

Original post →

More from coding & agent

coding & agent channel →