3 ms·
How is using Mythos different than existing static analysis, dynamic analysis, fuzzing, or DAST tooling?
by firesteelrain 5mo ago
How is using Mythos different than existing static analysis, dynamic analysis, fuzzing, or DAST tooling?
- nullbio 5mo agoMythos is likely a harness around those things.
- dyauspitr 5mo agoStop with this nonsense. At the most basic level, it’s different because you just point it at a thing and it does everything else.
- firesteelrain 5mo agoHow is it nonsense? We already have these tools for years and magically Mythos comes around and makes old new again.
- dyauspitr 5mo agoA guy working with those tools for 6 months might find some disparate vulnerabilities. You don’t see value in writing a prompt and having everything done for you in an evening? It’s not just that either, it chains various vulnerabilities, crafts an attack to exploit it and then verifies its real. You don’t see any value in this over having some guy plod through it for months? Also security is hard, most devs won’t find anything.
- firesteelrain 5mo agoThat sounds like marketing. Security tooling already automates scanning and exploit chaining. The hard part is context, accuracy, prioritization, and avoiding garbage results.