2 ms·

Multiple people who have already used Mythos or been given its reports on their software have publicly stated that it's all hype, and that it is not really find

by alt227 5mo ago

Multiple people who have already used Mythos or been given its reports on their software have publicly stated that it's all hype, and that it is not really finding any new critical bugs which other models cant.

Lerc 5mo ago
Do you have any good sources on that? I have seen things to suggest that not all of the hype is true, but so far I have not encountered anyone claiming all of the hype is untrue. Which is what I interpret "its all hype" (sic) to mean.
- alt227 5mo ago
  For example, It was recently let loose on cURL and its maintainer is less than impressed: https://www.theregister.com/security/2026/05/11/anthropics-bug-hunting-mythos-was-greatest-marketing-stunt-ever-says-curl-creator/5238111 https://www.theregister.com/security/2026/05/11/anthropics-b...
  - Lerc 5mo ago
    If you remove the fluff that the register added and stick with https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/ https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-v... it seems like a claim that's a claim fairly distant to "its all hype". Less than expected perhaps? Maybe the code really is unexpectedly robust? I guess time will tell on that point.
    - alt227 5mo ago
      His direct quotes are: > "My personal conclusion can however not end up with anything else than that the big hype around this model so far was primarily marketing." > "I see no evidence that this setup finds issues to any particular higher or more advanced degree than the other tools have done before Mythos." > "An amazingly successful marketing stunt for sure." Personally I see this as a very strong claim of hype. I take away from this that Mythos is a hyped up marketing stunt, and not what it was preesented to be by Anthropic at all.
- bluGill 5mo ago
  CURL has been scanned with multiple LLMs. Mythos was last and as a result found only 1 issue. If Myhos was really much better I'd expect it to find a lot more issues despite the others already there. Also, the competing models are getting better. Opus 4.5 was better than everyone else when it was new, but only a few months later and there are a lot of models that are better (not just the newer Opus models)
  - preommr 5mo ago
    Is the CURL thing mostly from the primagen video, or did it break into the greater social media sphere and I just missed it?
    - swingboy 5mo ago
      The cURL lead developer posted about it: https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/ https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-v...
    - alt227 5mo ago
      The Reg reported it: https://www.theregister.com/security/2026/05/11/anthropics-b https://www.theregister.com/security/2026/05/11/anthropics-b...
    - bluGill 5mo ago
      I've been following him on mastodon and read it right there
  - lmc 5mo ago
    Curl had a prominent bug bounty programme, has 180k lines of prod code, and is mainly a client app/lib. I would look at other projects before making judgements about mythos on this one.
    - dogleash 5mo ago
      Don't you want to test mythos against state of the art projects? They are the best chance of making visible what mythos uniquely brings to the table. We already know that mythos will be branded catnip for sub-SOTA projects. They could have build SOTA secure software development practices last week, last month or last year. But didn't care. What will their experience with mythos tell us other than AI hype can create corporate will to take security seriously?
jsw97 5mo ago
Of course if it really is overhyped, then it becomes much more difficult to release it publicly. Better to retain the mystique and release the next thing. But we'll see eventually.
tclancy 5mo ago
In this very thread we have a counter-example. What to think? https://news.ycombinator.com/item?id=48149519 https://news.ycombinator.com/item?id=48149519
- alt227 5mo ago
  Read the replies to that comment, they are very valid in their cyncism. The cURL creators report is the only real substance we have to go on. There are plenty of random comments both ways, but Im sure you and I would both agree that we shouldnt base our opinions on random internet comments and should wait for more official reports like the cURL one to make best judgement.

by alt227 5mo ago

Lerc 5mo ago

Do you have any good sources on that? I have seen things to suggest that not all of the hype is true, but so far I have not encountered anyone claiming all of the hype is untrue. Which is what I interpret "its all hype" (sic) to mean.

alt227 5mo ago
For example, It was recently let loose on cURL and its maintainer is less than impressed: https://www.theregister.com/security/2026/05/11/anthropics-bug-hunting-mythos-was-greatest-marketing-stunt-ever-says-curl-creator/5238111 https://www.theregister.com/security/2026/05/11/anthropics-b...
- Lerc 5mo ago
  If you remove the fluff that the register added and stick with https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/ https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-v... it seems like a claim that's a claim fairly distant to "its all hype". Less than expected perhaps? Maybe the code really is unexpectedly robust? I guess time will tell on that point.
  - alt227 5mo ago
    His direct quotes are: > "My personal conclusion can however not end up with anything else than that the big hype around this model so far was primarily marketing." > "I see no evidence that this setup finds issues to any particular higher or more advanced degree than the other tools have done before Mythos." > "An amazingly successful marketing stunt for sure." Personally I see this as a very strong claim of hype. I take away from this that Mythos is a hyped up marketing stunt, and not what it was preesented to be by Anthropic at all.
bluGill 5mo ago
CURL has been scanned with multiple LLMs. Mythos was last and as a result found only 1 issue. If Myhos was really much better I'd expect it to find a lot more issues despite the others already there. Also, the competing models are getting better. Opus 4.5 was better than everyone else when it was new, but only a few months later and there are a lot of models that are better (not just the newer Opus models)
- preommr 5mo ago
  Is the CURL thing mostly from the primagen video, or did it break into the greater social media sphere and I just missed it?
  - swingboy 5mo ago
    The cURL lead developer posted about it: https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-vulnerability/ https://daniel.haxx.se/blog/2026/05/11/mythos-finds-a-curl-v...
  - alt227 5mo ago
    The Reg reported it: https://www.theregister.com/security/2026/05/11/anthropics-b https://www.theregister.com/security/2026/05/11/anthropics-b...
  - bluGill 5mo ago
    I've been following him on mastodon and read it right there
- lmc 5mo ago
  Curl had a prominent bug bounty programme, has 180k lines of prod code, and is mainly a client app/lib. I would look at other projects before making judgements about mythos on this one.
  - dogleash 5mo ago
    Don't you want to test mythos against state of the art projects? They are the best chance of making visible what mythos uniquely brings to the table. We already know that mythos will be branded catnip for sub-SOTA projects. They could have build SOTA secure software development practices last week, last month or last year. But didn't care. What will their experience with mythos tell us other than AI hype can create corporate will to take security seriously?

jsw97 5mo ago

Of course if it really is overhyped, then it becomes much more difficult to release it publicly. Better to retain the mystique and release the next thing. But we'll see eventually.

tclancy 5mo ago

In this very thread we have a counter-example. What to think? https://news.ycombinator.com/item?id=48149519 https://news.ycombinator.com/item?id=48149519

alt227 5mo ago
Read the replies to that comment, they are very valid in their cyncism. The cURL creators report is the only real substance we have to go on. There are plenty of random comments both ways, but Im sure you and I would both agree that we shouldnt base our opinions on random internet comments and should wait for more official reports like the cURL one to make best judgement.