There are modern languages for that. Use Rust, don't loose your sleep over memory bugs.

FYI:

> Since then, Mythos and it’s safeguard-heavy equivalent

The simple "it's" vs. "its" rule is this:

If you can replace it with "it is" and it sounds weird, it's "its", otherwise it's "it's". In other words, "it's" is 100% of the time an abbreviation of "it is" (or, rarely, "it has"); it's not a possessive form.

Which is of course internally-inconsistent; I say "Peter's toys", not "Peters toys", but we say "its toys" to mean the same thing. /shrug

I only tell you this because I screwed it up for years before looking up the rule and going "... Oh. Duh. But also... Fucking hell, English!" ;)

"Released" is doing some heavy lifting here.

[dead]

All of this, but you forgot that ai opens up new vectors.

AI itself is a security risk: https://www.404media.co/hackers-simply-asked-meta-ai-to-give...

I keep seeing screen shots of random AI chat bots who have been prompt injected to write code. That car dealership is now paying for the tokens for some script kiddie to pump out python.

I've seen things you people wouldn't believe. Attack ships on fire off the shoulder of Orion. I watched C-beams glitter in the dark near the Tannhäuser Gate. All those moments will be lost in time, like tears in rain. Time to die.

Mythos actually does change that calculus. Going forward, with access to a mythos caliber llm actors are not tied to bad configs or lazy admins for access. I get that the bs is real. But it's important for you to not rest on your laurels having recognizing that salesmen sell. You actually have to pay attention to and understand the new developments your field. It's sad that the marketing department odd doing a better job than you in that manner

We already are using software that is ancient, with many vulnerabilities that are already in the public, we already use insecure software more than we care to admit, if Mythos is gonna help with that, it's gonna make finding (not discovering) these vulnerabilities easier because it already has the knowledge, but the enough intellect to come up with new ones. Same applies for other LLMs

Does depth matter when you can automate attacks with intelligent agents?

Forget whether it is Mythos or GPT 5.6, or any other specific model. SOTA models have tool likely have the knowledge and capability to create zero days from nearly every discovered and many undiscovered vulnerabilities. In the wrong hands can deploy and generate malware and submarine code that would go undetected behind secured systems. Add in the ability to clone voices, create mass social engineering campaigns.

Yet "Just another tool in the toolbox." I mean, that's not wrong!

Anthropic losing their ability to release new models to most customers (and thereby revenue, and thereby ability to train new models) makes you think investors will value it more highly than if they could release new models to everyone who wanted to pay them?

Nah I spoke to a security researcher who still has access to Mythos. He says it is significantly better than their earlier models for security research. Based on my one-day use of Fable that was also a noticeable step up for coding.

There's absolutely no way Anthropic engineered this to bump their IPO price. That's lunatic conspiracy theory territory.

> I would not be surprised if the US government, the people pulling the strings who actually put the export announcements onto Anthropic, actually have purchased stock in the company to artificially pump up the stock, I would bet money on it.

The same US government that labelled Anthropic as a supply chain risk? This is the most ridiculous idea I've heard all week.

[dead]

I'd be interested in a link to that talk if it's recorded

Ha yeah I totally agree, that's actually one of the future posts I have in draft : the other downfall of GenAI in cyber. You can't outsource learning, and a lot of learning opportunities in the Cybersecurity industry are getting totally ruined by llms (ctf, low hanging fruit bug bounties, foss software getting burnout by AI slop and closing the gate to potential newbie willing to get involved, etc.)

[dead]

Find some pretty good vulnerabilities, and at a very fast speed--one or two weeks ago, mimo-v2.5-pro(some where between v4 flash and pro), released ultra-speed version with 1000 tokens/s. gpt-5.6 sol also has a nominal 750 tokens/s

Comments are saying the vulns in that thread aren’t very impressive.

Those look like mostly nonsense/trivial findings

[dead]

Is the idea that self hosters tend to make less security mistakes than the big hosting companies?

> since they have values more compatible with western democracy.

I'm mostly investing in China these days too. Remember that they have no soul and only do this as long as it is beneficial to them to appear that way (liberal, democratic). Same for the US. This is how the game is played.

> things like ethnic cleansing (which these models are already being used for).

Got a cite?

Companies have never secured their stuff and it's not because they didn't have access to Mythos. No one cares and breaches don't cost them money or customers. If I sound cynical it's because I am.

There's no functional difference between

"Hey npm says this is vulnerable, we need to fix it!" / "Nah, later."

and

"Hey Mythos says this is vulnerable, we need to fix it!" / "Nah, later."

I tend to agree but open weight model seem to still be lagging behind in terms of capacity, even the recent ones like GLM 5.2. If anything I hope the sudden, unpredictable changes of policy will make EU companies think twice before putting all their eggs in the same AI vendors's basket, all US based. Vendors coming back on their retention policies like they did with Fable 5 or plainly cutting the service without notice should be a gigantic red flag about your business continuity.

It's maddening how the corporate world can get shy of using any of those Chinese models, just because they are Chinese. This kind of FUD makes little sense when the inference is done in-house or by an EU/US cloud provider.

[flagged]