@ChristosArgyrop@mastodon.social
Post #1102634
2026-04-10 05:32 UTC
Re: the supposedly super secret model Mythos (=fable, but in modern Greek this word means lie) here is the main issue. Announcements such as this fail to mention something obvious: many codebases suffer from historical bias ie they are secure according to the standard /knowledge/patterns that were around at the time the review was done.
Replies (1)
-
@ChristosArgyrop@mastodon.social 2026-04-10 05:33
However If the security pattern was not known at the time the initial security review was done (think SQL ingestion pre 1988 which iirc was the year it was discovered) the code would have been considered secure. Very few code bases are continuously reviewed for security after the initial one. Another good example is the DOS using non randomized hash keys in scripting languages. This one does not even need ingestion of the code...