Post #2198212
2026-05-08 04:01 UTC
@freddy@social.security.plumbing Curious exactly how many critical/high #Firefox bugs were reported by #Mythos, vs how many were confirmed/accepted as such by your team?
Replies (1)
-
@freddy@social.security.plumbing 2026-05-08 13:37
@endareth@disobey.net as written in the post, our harness did an evaluation to weed out false positives. All high severity bugs were deterministoccally reproducable (eg using addresssanitizer). At first, we had some of bugs where the attack requires non-default and obscure preferences in about:config. Once we had proper post-processing for default/unsopported config it just continued producing new and valuable findings of high severity. Still does.