Actually finding vulnerabilities using AI with Joshua Rogers
Update: 2025-10-13
Description
I chat with Joshua Rogers about a blog post he wrote as well as some bugs he submitted to the curl project. Joshua explains how he went searching for some AI tools to help find security bugs, and found out they can work, if you're a competent human. We discuss the challenges of finding effective tools, the importance of human oversight in triaging vulnerabilities, and how to submit those bugs to open source projects responsibly. It's a very sane and realistic conversation about what AI tools can and can't do, and how humans should be interacting with these things.
The show notes and blog post for this episode can be found at
https://opensourcesecurity.io/2025/2025-10-ai-joshua-rogers/
Comments
In Channel
Download from Google Play
Download from App Store
United States00:00
00:00
x
