After all that hype, AI scanner found one low-severity cURL flaw
The cURL creator cares more about his code than most companies do, I would conjecture; while this is a good reality check, I expect that it will be far more useful in the programming sweatshops responsible for the Domino’s website et al.
It’s still the wrong tool for the job. The sheer number of things generative AI is used for is embarrassing.
I expect that it will be far more useful in the programming sweatshops responsible for the Domino’s website et al.
It might be, but if the programmers don’t have the experience or knowledge to be able to understand the issues themselves then it may just create a lot of pointless busy work for them. Notice how even when the report was passed on by a human who has a strong incentive to make it look good, it was still 80% false positives.
But after the system turned up just a single vulnerability, he concluded the hype around Mythos was “primarily marketing” rather than a major AI security breakthrough.
Now there’s a surprise.
Also given how blatantly irresponsible all the giants have been, if they had something that powerful, they would have immediately put it out on the market to outcompete everybody else. That was the biggest tell. They do not have any moral responsibility in their DNA.
deleted by creator
I said it at the time and I’ll say it again: the only innovation that Anthropic developed for Mythos is a system card that performs regulatory capture faster and more completely than any software documentation ever written. I’m not impressed by Mythos, but I am terrified of Anthropic’s technical writing team.
If it’s all hype, then how come Mythos found 150 bugs in FireFox?
Personally I am responsible for some corporate software that Mythos found bugs in. Real ones. We’re fixing them literally RN. Not caught by formerly industry-standard static and dynamic analysis tools.
Good for cUrl if it had few flaws. Be aware you’re like a person who was already masking and distancing who didn’t get COVID. Your good, prophylactic work does not mean others are not severely impacted or that it’s “just a flu”.
Curl has had many others look. When most things are fixed it can’t find anything. Firefox is much more complex.
