144
Anthropic Mythos shaping up as nothingburger
(www.theregister.com)
Welcome to the main community in programming.dev! Feel free to post anything relating to programming here!
Cross posting is strongly encouraged in the instance. If you feel your post or another person's post makes sense in another community cross post into it.
Hope you enjoy the instance!
Rules
Follow the wormhole through a path of communities !webdev@programming.dev
I'm a bit confused because the quotes do seem to do Mythos quite a bit of justice here. Saying it is essentially the equivalent of an elite security researcher seems... good, right?
Isn't the threat that's being discussed "what if anyone could point this at anything and then actively exploit the things it finds"?
The article does not.
It states that logs indicate that the LLM was pointed at known bugs and reproduced known bug reports.
For FreeBSD, they state that the logs indicate that it was hand-guided to known issues.
For firefox, they ran it in a sandbox with most of Firefox's security disabled/stripped out.
It states that Mythos found no zero days.
Much of Lemmy is ideologically against AI, so it is difficult to have rational conversation about the topic here.
Yes, for many enterprises, an "automated security researcher" is likely to be quite useful... and by the same measure, likely to be dangerous in the wrong hands. People attempting to pounce on this as some sort of gotcha mostly havent engaged beyond the headline.
Well, you should read the article.
I did, but it seems very much like authorial biases kind of overshadowed over what was being said. Maybe I just have a different perspective on things, though.