alt Hacker News"so models will perform security analysis and reviews but refuse to write exploits."
Yeah, but once you know exactly where the weakness is, a weaker unrestricted model can then write that exploit for you.
"so models will perform security analysis and reviews but refuse to write exploits."
Yeah, but once you know exactly where the weakness is, a weaker unrestricted model can then write that exploit for you.
I have tested this exact scenario, and it works. Opus 5 had access to IDA over MCP, and I simply asked it HOW certain things were done in the target binary. Purely informational, educational, discovery, it was very helpful creating context documents. Then I took those over to GLM-5.2 to actually accomplish something.