Discussion

• @moyix Brendan Dolan-Gavitt on x

  Excuse me I was assured it was all hype [image]

• Allan Friedman, PhD Allan Friedman, PhD on linkedin

  Great piece by the Mozilla team on their use of the Mythos preview:  —  They have found that this gen of tools can identify vulns in arbitrary cateogries …

• @marypcbuk Mary Branscombe on bluesky

  Remember I mentioned that there were ~90 bugs fixed in Edge Chromium this last patch Tuesday?  Responsible dev teams are going to find and fix a ton of bugs; eventually attackers are going to use these models to find what devs haven't [embedded post]

• @mackuba.eu Kuba Suder on bluesky

  “Computers were completely incapable of doing this a few months ago, and now they excel at it.  We have many years of experience picking apart the work of the world's best security researchers, and Mythos Preview is every bit as capable.”

• @glinden Greg Linden on bluesky

  It took me a while to find a description of what these fixes actually were and whether they were critical vulnerabilities.  For others who might be interested, here's the security fixes part of the release notes:  —  www.mozilla.org/en-US/securi...

• @matthew.flux.community Matthew Sheffield on bluesky

  Mozilla has essentially endorsed Anthropic's claims about Mythos after the model found 271 vulnerabilities in the Firefox codebase.  —  But instead of seeing Mythos as a zero-day doomsday, CTO Bobby Holley hails it as a bounty for security auditing:

• @anildash.com Anil Dash on bluesky

  That whole LLM-security-response-as-the-new- Y2K thing is really continuing apace: www.wired.com/story/mozill...

• @carnage4life Dare Obasanjo on bluesky

  Mozilla just reported that Anthropic's Mythos model identified 271 security vulnerabilities.  It's an incredible figure.  —  Yet Mozilla downplays this massive haul, claiming Mythos found nothing a human couldn't, despite making their code look like it had more holes than a block…

• @caseynewton Casey Newton on bluesky

  Meanwhile OpenAI is going on podcasts saying that the limited Mythos release is simply “fear-based marketing” [embedded post]

• @campuscodi.risky.biz Catalin Cimpanu on bluesky

  Firefox users... you dirty little privileged c***s!  —  You're living in the tech bro future utopia! [embedded post]

• @katie-drummond Katie Drummond on bluesky

  “Now a powerful new capability has arrived—and as we've seen repeatedly in tech, there's the risk that organizations with resources will receive it first and learn to protect themselves, while others are left vulnerable.”

• @lhn Lily Hay Newman on bluesky

  Interesting view from Firefox on The Cyber AI Reckoning.  Bobby Holley says, “This is a transitory moment that is difficult and requires coordinated focus and a lot of grit to get through, but I think that it is a finite moment, even as the models become more advanced” www.wired.…

• @timmarchman Tim Marchman on bluesky

  NEW: Mozilla has already used Mythos to find hundreds of bugs, which is good and interesting in its own right and also points up that contra some catastrophizing coverage, it isn't only attackers who will have access to these capabilities. @lhn.bsky.social has the news:

• r/InterstellarKinetics r on reddit

  BREAKTHROUGH: Mozilla Used Anthropic's Secret Mythos AI To Find 271 Security Vulnerabilities In Mozilla Firefox In A Single Pass, And Says Defenders Can Finally Win 🤯🔥

• r/singularity r on reddit

  Mozilla Used Anthropic's Mythos to Find and Fix 271 Bugs in Firefox

• r/technology r on reddit

  Mozilla Used Anthropic's Mythos to Find and Fix 271 Bugs in Firefox

• r/browsers r on reddit

  Mozilla Used Anthropic's Mythos to Find and Fix 271 Bugs in Firefox

• r/firefox r on reddit

  Mozilla Used Anthropic's Mythos to Find and Fix 151 Bugs in Firefox

• r/Anthropic r on reddit

  Mozilla Used Anthropic's Mythos to Find and Fix 151 Bugs in Firefox

• @glinden Greg Linden on bluesky

  It wasn't clear in the Wired article or in the Mozilla blog post how serious these 271 vulnerabilities in Firefox were.  It looks like they were important but not critical (in the details in the release notes in the quoted post below).  —  www.wired.com/story/mozill...  [embedded…

• Stephanie Domas Stephanie Domas on linkedin

  One of the questions I've been sitting with lately is: what does AI actually change about security—not in theory, but in practice? …

• r/technology r on reddit

  Mozilla: Anthropic's Mythos found 271 zero-day vulnerabilities in Firefox

• r/cybersecurity r on reddit

  The zero-days are numbered |  Mythos numbers are real?

• @dbreunig Drew Breunig on x

  Not sure I fully buy the argument, but this is an encouraging data point from the Firefox team on their experience with Mythos. [image]