Hacker News new | ask | show | jobs
by sigmoid10 3 days ago
>There is a way more interesting telegram RCE that kimi k3 allegedly discovered.

Telegram server or client? The client is open source, so I expect any reasonably capable model to find things there sooner or later. But the sever is closed source. Finding an RCE there would be wild for such a model, since it would have to solve a whole bunch of adjacent problems instead of just digesting tons of code.
1 comments
pixl97 3 days ago
I mean having the client source code can show you a vast number of the API's and their fields which allows you to fuzz the server quite a bit more easily.
link
sigmoid10 3 days ago
Maybe. The RCE was on the Telegram Desktop client though.
link