4 ms·
I get that this was probably difficult because of timing and such, but I wish Anthropic had announced at least one vulnerability in a closed-source program as p
by ameliaquining 6mo ago
I get that this was probably difficult because of timing and such, but I wish Anthropic had announced at least one vulnerability in a closed-source program as part of the Mythos announcement. Since all the vulnerabilities announced at that time were in OSS, I think this contributed to the perception that the coming wave of security-research automation is specifically for programs where the LLM can look at the source code. (Anthropic claims that Mythos found vulnerabilities in closed-source programs, but that none of them had been fully patched yet as of the announcement, so didn't say what they were.)
- extraduder_ire 6mo agoIs that "obscurity through insecurity"?
- deleted 6mo ago[deleted]
- leereeves 6mo agoDid Mythos find vulnerabilities in programs Anthropic didn't have source for?
- ameliaquining 6mo agoYes, by reverse-engineering the stripped binaries: https://red.anthropic.com/2026/mythos-preview/#:~:text=The%20above%20case,and%20f4adbc142bf534b9c514b5fe88d532124842f1dfb40032c982781650. https://red.anthropic.com/2026/mythos-preview/#:~:text=The%2...