PulseAugur
中
实时 03:20:09
English(EN) I keep seeing the same two failures when people try to run a model locally. The first is buying or... # ai # llm # machinelearning # hardware # software # codin

Anthropic 的 Claude AI 识别出 NIST P-256 随机数生成器漏洞

作者 PulseAugur 编辑部 · [2 个来源] ·

Anthropic 的 Claude AI 识别出 NIST P-256 随机数生成器中的一个漏洞，将其种子追溯到 1997 年的时间戳和 `lrand48` 函数。安全研究员 Valsorda 证实了这些发现，并建议虽然无需立即轮换，但用户应验证自己的随机数生成器。第二项讨论了尝试在本地运行 AI 模型时遇到的常见陷阱，重点介绍了硬件和软件配置问题。 AI

影响 凸显了 AI 在代码审计和漏洞检测方面的能力，促使对随机数生成进行更广泛的检查。

排序理由 AI 模型识别出特定的技术漏洞，并由安全研究员进行验证。

在 Mastodon — fosstodon.org 阅读 →

AI 生成摘要 · Google Gemini · 来自 2 个来源。 我们如何撰写摘要 →

Anthropic 的 Claude AI 识别出 NIST P-256 随机数生成器漏洞

本文如何被排名

Signal score
8 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Research
AI 模型识别出特定的技术漏洞，并由安全研究员进行验证。
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
safety, other
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
Breaking (< 6h)
Fresh story with cross-source coverage still developing. Ranking may shift as more sources report.

完整方法见我们的编辑标准。

报道来源 [2]

  1. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    Anthropic称Claude发现NIST P-256种子来自用1997年时间戳播种的lrand48。Valsorda已验证。无需轮换；请检查您自己的RNG。

    Anthropic says Claude found the NIST P-256 seeds came from lrand48 seeded with a 1997 timestamp. Valsorda verified it. Nothing to rotate; check your own RNGs. # ai # security # cryptography # news # software # coding # development # engineering # inclusive # community Claude Trac…

    链接 dev.to/…/claude-traced-the-nist-curve-see…
  2. Mastodon — fosstodon.org TIER_1 English(EN) · [email protected] ·

    人们尝试本地运行模型时，我总是看到同样的两个失败。第一个是购买或... # ai # llm # machinelearning # hardware # software # codin

    I keep seeing the same two failures when people try to run a model locally. The first is buying or... # ai # llm # machinelearning # hardware # software # coding # development # engineering # inclusive # community Two questions before you run a local LLM: does it fit, and how fas…

    链接 dev.to/…/two-questions-before-you-run-a-l…

相关实体

相关话题