OpenAI said the company's AI identified 948 vulnerabilities in the Linux kernel and generated a working attack for every vulnerability. The company put the cost at $1,279 per instance. The Linux kernel forms the central component of the Linux operating system, which supports global information technology infrastructure, including blockchain and crypto systems.
The attacks allow a person with limited access, such as a basic user account, to gain complete control of a Linux computer. OpenAI said the attacks succeeded on a standard Linux desktop with the usual security protections enabled.
OpenAI said the system first examines potentially risky code for vulnerabilities and then tests the vulnerabilities in an isolated sandbox. The system next determines whether an attack can exploit each vulnerability and proposes a fix when exploitation is possible. Human researchers examine the findings before the findings reach Linux maintainers.
OpenAI said the purpose is defensive: discovering vulnerabilities before hackers find the vulnerabilities so repairs can be made. The company estimated a hypothetical value of $18.9 million to $66.3 million for the 948 flaws, based on typical prizes at hacking competitions such as Pwn2Own. OpenAI put the total cost of running the AI at $1.2 million. OpenAI argued that defenders should proactively examine software with AI to make cyberattacks prohibitively expensive. Discovering the flaws costs less than the hypothetical value of the flaws, making early discovery important for defenders.
OpenAI made no reference to crypto. Most blockchain infrastructure runs on Linux. According to ethernodes.org, about two-thirds of Ethereum nodes, the computers that sustain the network, use Linux. Crypto experts said the industry is better positioned than most industries to withstand vulnerabilities of this kind.
Mudit Gupta, chief technology officer at Polygon Labs, said decentralization gives crypto inherent resistance to such exploits. Gupta said varied infrastructure and redundancy make crypto substantially more resilient to these flaws than traditional software.
Caducus, a blockchain evangelist and security researcher, said, "AI discovers vulnerabilities at a 10000x". Caducus predicted that decentralization and crypto would soon become the most resilient systems in existence. Caducus argued that crypto became resilient because financial rewards for attackers caused crypto to face attacks early.
The findings come from OpenAI itself. The model used to produce the findings has not been released.
OpenAI AI Discovers 948 Linux Kernel Vulnerabilities, Generates Working Attacks
CoinDeskShare
Summary
OpenAI's AI uncovered 948 Linux kernel vulnerabilities, including working attack code, with CFT and crypto security implications. The Linux kernel is foundational to global IT, including liquidity and crypto markets infrastructure. OpenAI’s system identifies risky code, tests flaws in isolation, and proposes fixes for human review. The AI cost $1.2 million to run, with a potential bounty of up to $66.3 million. While OpenAI didn’t mention crypto, experts say blockchain’s design makes it less vulnerable to exploitation.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.