4 ms·
The fact there is no mention of what were the bugs is a little odd. It'd really be nice to see if this is a "weird never happening edge case" or actual issues.
by fcpk 7mo ago
The fact there is no mention of what were the bugs is a little odd.
It'd really be nice to see if this is a "weird never happening edge case" or actual issues. LLMs have uncanny abilities to identify failure patterns that it has seen before, but they are not necessarily meaningful.
- pjmlp 7mo agoIndeed, without it looks like a fluffy marketing piece.
- tptacek 7mo agoAnd now that you know that it isn't, do you feel differently about the logic you used to write this comment?
- john_strinlai 7mo agoi am curious, what are you hoping to get out of this comment? will you feel better if they say yes? what is your plan if they say no?
- tptacek 7mo agoI genuinely want to understand how they arrived at the claim that this was a fluffy marketing piece. Like, if you said on a different thread, "the Linux kernel is probably mostly written in Pascal", I would really want to understand how it was you got to that idea.
- JumpCrisscross 7mo ago> what are you hoping to get out of this comment? Rando here. It gives a signal on the account’s other comments, as well as the value of the original comment (as a hypothesis, albeit a wrong one, versus blind raging).
- john_strinlai 7mo ago>"It gives a signal on the account's other comments," fair enough. i typically use karma as a rough proxy for that, especially when the user has a lot of it (like, in this case, where the poster is #17 on the leaderboard with 100,000+ karma). you dont get that much karma if you are consistently posting bad takes. >as well as the value of the original comment (as a hypothesis, albeit a wrong one, versus blind raging). i dont see, in this case anyways, how or why that distinction would matter or change anything (in this case specifically, what would you change or do differently if it was a hypothesis or simple "raging"?), but im probably just thinking about it incorrectly.
- TheBicPen 7mo ago> you dont get that much karma if you are consistently posting bad takes. I wonder how true that is. While this site doesn't have incentivize engagement-maximizing behaviour (posting ragebait) like some other sites do, I would imagine that simply posting more is the best way to accrue karma long-term.
- john_strinlai 7mo ago>I would imagine that simply posting more is the best way to accrue karma long-term. i definitely agree, which is why i use it as a rough proxy rather than ground truth, but i have my doubts that you can casually "post more" your way into the top 20 karma users of all time.
- tptacek 7mo agoI think a lot of people are overreading this and really all that's happened here is that I was out at a show last night and was really foggy when I woke up and asked a question clumsily. It happens!
- john_strinlai 7mo agoyeah, absolutely, i was not intending to start some big inquisition against you or anything. just like you were genuinely trying to understand where pjmlp was coming from, i was genuinely trying to understand what you would get out of an answer to your question (or, like, what the next reply could even be other than "ok, cool").
- pjmlp 7mo agoDo I?
- tptacek 7mo agoI don't know. I'm really asking. I have you bucketed in my head in the cohort of "HN commenters who write lots of assembly", so the mismatch between your prediction and the outcome is just really interesting to me.
- deafpolygon 7mo agoI’m guessing it might be some of these: https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-1...
- muizelaar 7mo agoYeah, the ones reported by Evyatar Ben Asher et al.
- robin_reala 7mo agoI correctly misread that as “et AI”.
- deafpolygon 7mo ago“et AI, Brutus!"
- tclancy 7mo agoYon Claude has a lean and hungry look.
- deafpolygon 7mo agoAn LLM by any other name would hallucinate the same
- iosifache 7mo agoYou can find them linked [1] in the OG article from Anthropic [2]. [1] https://www.mozilla.org/en-US/security/advisories/mfsa2026-13/ https://www.mozilla.org/en-US/security/advisories/mfsa2026-1... [2] https://www.anthropic.com/news/mozilla-firefox-security https://www.anthropic.com/news/mozilla-firefox-security
- jandem 7mo agoHere's a write-up for one of the bugs they found: https://red.anthropic.com/2026/exploit/ https://red.anthropic.com/2026/exploit/
- larodi 7mo agoThe fact that some of the Claude-discovered bugs were quite severe is also a little more than something to brush off as "yeah, LLM, whatever". The lists reads quite meaningful to me, but I'm not a security expert anyways.
- deleted 7mo ago[deleted]