ofjcihen

17 ms·

361.
by ofjcihen 7mo ago
So it seems like you just…have it once you get approved. I’m testing it now and nothing indicates I’m running a different model but it just doesn’t fight me on cybersecurity stuff
362.
by ofjcihen 7mo ago
Whoa hey now, if they just give out all the cyber all at once they might run out or worse, the bad guys will horde all the cyber for themselves! No no, best to have them distribute the cyber to us responsibly.
363.
by ofjcihen 7mo ago
I love that in the era of having LLMs summarize everything all of these companies have opted for what I call the “YouTube streamer apology video” tone and length for these announcements. These feels more or less like a way to get in the new
364.
by ofjcihen 7mo ago
I see this copy-pastad everywhere these days but it misses a huge point which is that written things don’t read or understand themselves.
365.
by ofjcihen 7mo ago
I’m seeing these extremely short but supremely confident hot takes with nothing to back them up on HN more and more these days. It’s like X is leaking.
366.
by ofjcihen 7mo ago
Reminds me of a bounty I received recently. Someone essentially exposed a bedrock agent that had access to the companies internal documents to the internet unauthenticated. They actually had the reports and notes for other bug bounties that
367.
by ofjcihen 7mo ago
Been saying this for a bit but the things I’ve seen associated with AI seem to be the things that it’s pretty mid at. Coding, automated actions etc. I wholeheartedly believe adoption and perception would be better if the things it was amazi
368.
by ofjcihen 7mo ago
This is great data that shows a more realistic view of what Mythos is capable of and exactly what I’ve been hoping to see on the tail of the hype-train. These details are what are actually important to defenders like myself. As others have
369.
by ofjcihen 7mo ago
#3 is part of my confusion with how they’re doing the marketing. It really is incredible.
370.
by ofjcihen 7mo ago
“Hey Claude, how do I market an exceedingly expensive product that I also don’t have the resources to run at scale if I find out everyone is willing to pay?” All jokes aside I’m amazed at all of the people who have had absolutely vicious re
371.
by ofjcihen 7mo ago
If anything couldn’t huge amounts of code changes or LoC be a sign of a poor outcome?
372.
by ofjcihen 7mo ago
Yeah definitely. To be fair before LLMs I was a security researcher for years so with that experience I was more or less able to replicate most of an acceptable process (even up to report generation). I still review and make a decision abou
373.
by ofjcihen 7mo ago
Been running into the same issue since a week or 2 ago on Opus. To be fair I have a pretty loose harness and pattern but it’s been enough to pull in 20k in bounties a month for a long time without going over plan with very little steering (
374.
by ofjcihen 7mo ago
You did. The point is if you let something think about x for you you will become worse at thinking about x.
375.
by ofjcihen 7mo ago
56 Stars Better than 100% of players Git rekd nerds
376.
by ofjcihen 7mo ago
Bounties?
377.
by ofjcihen 7mo ago
Sure, and healthy skepticism before proof is a sign of wisdom. Which makes taking claims from companies at face value…?
378.
by ofjcihen 7mo ago
Will you eat your words when you find out major vuln disclosures have been happening for decades?
379.
by ofjcihen 7mo ago
This. I’ve been hearing panic from the non-security community about Mythos because “zomg z3r0 d4y5!!” Since the announcement but these are the same people running production servers 10 updates and 2 critical security fixes behind for years.
380.
by ofjcihen 7mo ago
Tangential to the worries of those surveyed: I noticed a drop in my critical thinking and skills very quickly. It makes sense, the easiest thing to do is just ask AI for the answer or ideas and then tell it to implement them. I’m deliberate
381.
by ofjcihen 7mo ago
We must have read two different red team blogs from Anthropic if that’s what you think is happening. But let’s go ahead and assume what you’re asking at face value. It would not be a doomsday issue as implied, no. Org security has gone far
382.
by ofjcihen 7mo ago
A 0 day is just a vulnerability that wasn’t known before now. What’s the criticality of these? Are they realistically exploitable? En mass? Through a complex and highly contextual set of actions? What’s the impact? Etc etc etc. Yes those nu
383.
by ofjcihen 7mo ago
Hahaha I think we might have the same toothbrush. That makes sense and I like the analogy.
384.
by ofjcihen 7mo ago
Oh I agree with you on that. But that’s partially why the language in the presser falls flat for me. I mean as an example while web app pen testing I’ve been running and proxying all my traffic through it with instructions to find vulnerabi
385.
by ofjcihen 7mo ago
Don’t forget, it also depends on the complexity of the work and the experiences of the operator. The less complex the work and the less experienced the operator means more perceived “wow” factor :) There’s definitely an aspect of how you us
386.
by ofjcihen 7mo ago
I mean if it helps I support the move to not release mythos right off the bat yeah? That makes sense, treat new models like new vulnerabilities and give companies time to scan with them etc. But you have to admit it does serve a savvy busin
387.
by ofjcihen 7mo ago
Homie chill. I use Opus every day and I love it. I’m not saying it’s all hype, just that these companies are here to make money and that every advertisement should be taken with salt yeah? Also maybe consider what this kind of visceral reac
388.
by ofjcihen 7mo ago
That feels like a very complex way of looking at it. Another way would be to say “potentially profit seeking companies have an incentive to oversell products even if they’re good”.
389.
by ofjcihen 7mo ago
I mean, yes? And my point is that this isn’t exactly a new capability. Sure it’s probably better but we’ve been able to do this. They didn’t just suddenly “turn on the security”. LLMs have excelled at code since widely being released. I hav
390.
by ofjcihen 7mo ago
I mean I work in this world and overhype is constant. Additionally those numbers are somewhat meaningless without more context.

More ›