Re: Coordinated Disclosure in the LLM Age

[Alan Coopersmith <alan.coopersmith () oracle com>]

On 4/28/26 07:58, Jeremy Stanley wrote:
> I'm sorely tempted, both due to the increased volume and the risk of premature 
> disclosure, to just assume that any vulnerability reported as a result of 
> research using an LLM is trivially discoverable by others, and give up trying to 
> pretend there's any point to working it under embargo. 

Other maintainers under similar floods seem to agree:

Linux kernel:
 - https://lkml.org/lkml/2026/5/17/896
 - https://docs.kernel.org/process/security-bugs.html

DNS servers (BIND, Unbound, PowerDNS):
- https://indico.dns-oarc.net/event/56/contributions/1233/
- https://indico.dns-oarc.net/event/56/contributions/1233/attachments/1180/2539/presentation.pdf

--
        -Alan Coopersmith-                 alan.coopersmith () oracle com
         Oracle Solaris Engineering - https://blogs.oracle.com/solaris