Formal verification's real value: shrinking the search space for red teams

jd_pressman · x · 2026-11-15

jdpressman argues the primary point of formal verification isn't writing perfect software on the first pass, but reducing the search space so red teams can go straight after what remains most vulnerable.

The quoted practice: instructing ChatGPT to write a profiler finding every spot on the request path where a DoS could theoretically occur (attacker-controllable resources), then testing under load with deployment benchmarks — empirically eliminating DoS bugs as a category in a web server.

Related event: Using ChatGPT to profile and eliminate DoS vulnerabilities(2 posts)→

Original post →

More from coding & agent

coding & agent channel →