Tag
The author argues that the latest high-profile PHP vulnerability is far less exploitable than Log4Shell or Heartbleed, and that the thousands of circulating 'PoC' exploits are largely broken artifacts generated by LLMs that modify test environments instead of chaining the real bug.
The article presents a practical critique of long-running LLM sessions, life-companion agents, and persistent memory systems, raising issues of privacy, cost, intent-loss, and maintainance. It proposes alternative solutions like issue-bound ephemeral session chains and prompt templates.