Kimi K3 exploited the latest Redis server(twitter.com)
241 points by Alifatisk 1 day ago | 72 comments
tl;dr: Summary not available
HN Discussion:
  • The exploit is unimpressive since it's an authenticated RCE requiring existing access, not a real security boundary breach
  • Concerns about LLMs democratizing exploit development and putting zero-day tools in unskilled hands
  • ~Reproducing the result requires complex harness setup, not just copy-pasting a prompt
  • ~The finding about Kimi K3's capabilities is interesting even if the 0day itself is trivial
  • Memory-unsafe C/C++ code is the underlying problem; Rust alternatives are needed