OpenAI 打包 Codex 技能用于检查网站是否受 PHP 漏洞影响
If you are wondering whether your website is affected, we have packaged a Codex skill to help check.
OpenAI 发布一个 Codex 技能，用于检查网站是否受其披露的 PHP 安全漏洞影响，用户可将 Codex 指向指定仓库按引导完成排查。该漏洞由 OpenAI 模型在 Patch the Planet 计划中发现，涉及运行约 70% 网站的开源语言 PHP，修复需对 PHP 引擎做较大改动，目前使用 PHP 的站点可升级版本并配合安全厂商的缓解措施。
推荐理由
精选AI 评分 74
OpenAI 把 PHP 漏洞排查流程封装成 Codex 技能，读者可据此了解如何用仓库引导模型自查网站是否受影响。
主题
查看原帖OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure.…
展开完整原文
OpenAI models helped researchers—operating as part of our Patch the Planet initiative—discover critical security flaws in PHP, an open-source programming language used to run an estimated 70% of websites. Over the past two months, we led a coalition of maintainers, researchers, and security providers to prepare fixes and protections ahead of disclosure. This duration was necessary because the fix was quite intricate and required a major change to the PHP engine. Every site using PHP can now safely upgrade their version to stay secure, in addition to applying mitigations from various security vendors. Due to the severity of these flaws and PHP’s widespread use, we consider this bug to be one of the most impactful vulnerabilities in recent memory. It also marks a new phase, where AI can find security bugs with internet-scale impact. This is an example of the Defender’s Window in action: to our knowledge, frontier AI was able to find this vulnerability ahead of attackers, giving defenders time to prepare. https://t.co/TW3jrSbB3f