ZrArm

5 ms·

1.
by ZrArm 4mo ago
> Maybe curl is significantly better hardened than most projects? Meanwhile from [1]: "Not even half-way through this #curl release cycle we are already at 11 confirmed vulnerabilities - and there are three left in the queue to asse
2.
by ZrArm 4mo ago
From Mozilla post [1]: "...After fixing the initial set of issues that Anthropic sent to us in February, we built our own harness atop our existing fuzzing infrastructure. We began with small-scale experiments prompting the harness to
3.
by ZrArm 4mo ago
> After one month, most partners have each found hundreds of critical- or high-severity vulnerabilities in their software. And at the moment we have reports from like around 5(?) companies. Btw, Palo Alto Networks has found only 26 vulne
4.
by ZrArm 4mo ago
> As much as I’d like to share in the skepticism, the very beginning of the article states it very plainly — this is a step function. To be fair, they can't say "You know, Mythos is better, but improvements are overhyped af&quo
5.
by ZrArm 4mo ago
> Unless you have reasons to not believe the dozens of credentialed, well respected people in the field that have already shared their opinions after working with mythos. Exactly the same argument was made about o3-preview, lol. But anyw
6.
by ZrArm 4mo ago
It makes sense, thanks, even though that wording is still somewhat confusing.
7.
by ZrArm 4mo ago
> Mythos did in fact write PoCs for all bugs that crash with demonstration of memory-unsafe behavior (e.g. use-after-free, out-of-bounds reads/writes, etc). But report [1] says that "Some of these bugs showed evidence of memory