15
The zero-days are numbered (blog.mozilla.org)
submitted 6 months ago by [B] to c/pulse_of_truth@infosec.pub
12 comments fedilink hide all child comments
 

Comments

you are viewing a single comment's thread
view the rest of the comments
[–] -4 points 6 months ago (8 children)

If they didn't work with mythos those 271 zero days would be impacting everyone for the indefinite future...

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 9 points 6 months ago* (last edited 6 months ago)

    Most of them were either:

    • firefox vulnerabilities that only apply with sandbox specifically disabled
    • not actually discovered by mythos and instead involved a researcher guiding mythos to the vulnerabilities, not the other way around
    • not actually discovered by mythos and instead the model used was opus, which undermines the MyThOs Is ToO dAnGeRoUs narrative

    Nearly all of the reporting on this subject is pure misinformation that contradicts the papers that were released.

    This is just a stunt to create an excuse for why Anthropic cannot give public access to their latest model without revealing the truth and actual reason: their business model is not viable and it would bankrupt them.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 6 months ago (5 children)

    ‘fixes’ problem it created

    yay!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 1 point 6 months ago (4 children)

    It didn't create the problem. These are existing high severity exploits

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 6 months ago (2 children)

    that nobody knew of and most with no way to exploit…

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 6 months ago (1 child)

    Nobody knew of publicly, that's the whole point of a zero day

    These things get found and sold and used in secret for months or years before the public find and patch

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 4 points 6 months ago

    you act like every exploit gives you a terminal

    and do you really believe that the blue team for these companies does not have a presence on these forums trading these exploits there's a reason most the big shit is either social eng or an insider threat

  • permalink
  • fedilink
  • source
  • parent