Post #2723505
2026-05-11 10:22 UTC
@mechko@chaos.social The only thing that's surprising is that it found only one vulnerability. Curl is a monster of a package with huge numbers of dependencies.
Replies (2)
-
@janvenetor@mastodontti.fi 2026-05-11 10:37
@eliotlear@mastodon.social @mechko@chaos.social and another good point, the tooling doesn't find new classes of exploits or new approaches to break code. Lots of old and familiar kind of holes to go through, still..
-
@chopsstephens@mastodon.nzoss.nz 2026-05-12 07:03
@eliotlear@mastodon.social @mechko@chaos.social the blog talks about why that is; because it's already been security analysed by many models. The conclusion Daniel reaches is (my paraphrase) LLM models really are good for security analysis, but Mythos is overhyped, and not much better than the other models they've already used.