<![CDATA[I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos.]]>I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. I’ve read the research paper they released and the numbers, and basically I agree with @malwaretech’s take. It’s marketing. The cybersecurity industry is historically very good at marketing cyber pearl harbour and the need to buy magic boxes.

Link Preview Image
]]>https://board.circlewithadot.net/topic/9aeac6c3-e63a-4ae6-9cf0-10b57122973a/i-ve-had-a-bunch-of-people-ask-my-thoughts-on-anthropic-s-mythos.RSS for NodeWed, 15 Apr 2026 01:03:14 GMTSun, 12 Apr 2026 09:16:31 GMT60<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Mon, 13 Apr 2026 07:15:35 GMT]]>@GossiTheDog @malwaretech it is very funny seeing the reactions to @malwaretech 's post.

how is launching rockets into space with very limited weight and space going to be cheaper in the long run? what happens when hardware fails?

also, what incentives do AI companies as a whole have to drive down token costs and actually pass down that reduced cost to customers? unfortunately, a quick search reveals that nobody's really graphing the cost of different models over time so I can't solidly say this, but: haven't we seen the opposite?

Link Preview Image
]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/novet/statuses/116396165399810936https://board.circlewithadot.net/post/https://infosec.exchange/users/novet/statuses/116396165399810936Mon, 13 Apr 2026 07:15:35 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 23:24:00 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg Microsoft was extremely bad because they had a monopoly which they exploited to hurt the competition. The situation now is that we have three US competitors that are leapfrogging each other in taking the top spot. I'll be very worried if one of them gains a permanent advantage. But there is no sign of that so far. Rather the opposite actually, one of the Chinese (z.ai) is almost at the same level.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116394311078398236https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116394311078398236Sun, 12 Apr 2026 23:24:00 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 23:00:46 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg

"Ensloppifying does not increase the set of trustworthy software to be found"

This is precisely what happened with this model though. It has found bugs written decades ago by humans, leading to these bugs being fixed. Leading to at least these programs being better.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116394219701933238https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116394219701933238Sun, 12 Apr 2026 23:00:46 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 22:36:04 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg I'm interested in what effects this model will have on the security landscape. Whether it is ethical or not, it exists and can't be wished away. Similarly while I also would like all software in general and ffmpeg in particular to be written in a decent language, this is not the case as the world exists today..

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116394122589353315https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116394122589353315Sun, 12 Apr 2026 22:36:04 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 21:40:40 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg Do you have a source for the millions in unreported results? For instance the phrasing in for ffmpeg is clear that it is ten thousand for all runs: "Mythos Preview identified several other important vulnerabilities in FFmpeg after several hundred runs over the repository, at a cost of roughly ten thousand dollars."

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393904704524306https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393904704524306Sun, 12 Apr 2026 21:40:40 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 21:35:35 GMT]]>@samiamsam @GossiTheDog @malwaretech except bigger picture, not just cyber sec, corpo grifting IS the end of the world. I long for the return of the wholesome grift of pet rock. At least it doesn't horde hardware, boil aquifers and recommission ancient busted radioactive dumps to just sit on the shelf. Pet rock has never took your jerb, ruined data and collective knowledge (I guess unless locally scoped to being hurled at ones head), or speed run climate deaths.

Team Pet Rock! No quarter or grace for corpo/oligarch grifting with AI anything.

]]>https://board.circlewithadot.net/post/https://todon.eu/users/controlfreak/statuses/116393884758862569https://board.circlewithadot.net/post/https://todon.eu/users/controlfreak/statuses/116393884758862569Sun, 12 Apr 2026 21:35:35 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 21:15:11 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg "That's an indictment of a project's quality, not a validation of the LLM's quality." So you're saying that FreeBSD is bad. Fine. Anyway an additional motivation for what Anthropic did is to help open source projects by alerting them to security vulnerabilities so they can fix them. Are you objecting to that as well?

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393804507135452https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393804507135452Sun, 12 Apr 2026 21:15:11 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 20:36:03 GMT]]>@trademark @lispi314 @GossiTheDog @azonenberg OK, blocking the AI booster shill concern troll who thinks he's stealth now. Can't believe I wasted this much time on this asshat already.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393650643406219https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393650643406219Sun, 12 Apr 2026 20:36:03 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 20:32:59 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg The point of what Anthropic did was to demonstrate how good the new model is. Whether the NFS code should be in the kernel or not is an interesting discussion. However the fact is that exploiting kernel-level code usually is harder than attacking userspace programs. So when the AI succeeded in doing just that it is an indication of how technically skilled it is compared to earlier versions.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393638580443360https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393638580443360Sun, 12 Apr 2026 20:32:59 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 20:26:44 GMT]]>@dalias @lispi314 @GossiTheDog @azonenberg No, it is not fraud when you call something in the FreeBSD base system for FreeBSD code. If the code had been third-party code in ports you'd have had point. But that is not the case, so you are wrong again.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393614046883221https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393614046883221Sun, 12 Apr 2026 20:26:44 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 20:15:52 GMT]]>@dalias

Unikernel is a way of achieving the same goal in a way that is reasonable from security point of view.]]>https://board.circlewithadot.net/post/https://agora.echelon.pl/objects/af388f0c-3937-430e-b144-6756daa1faa7https://board.circlewithadot.net/post/https://agora.echelon.pl/objects/af388f0c-3937-430e-b144-6756daa1faa7Sun, 12 Apr 2026 20:15:52 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 20:02:05 GMT]]>@trademark @lispi314 @GossiTheDog @azonenberg I am debunking the fraudulent importance from misrepresenting what software the vuln was in.

Whether their technical claims are bullshit is another completely legitimate area for debunking but not the one I'm engaged with in this thread.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393517079455743https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393517079455743Sun, 12 Apr 2026 20:02:05 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:59:34 GMT]]>@dalias @lispi314 @GossiTheDog @azonenberg Oh, and also, earlier you said: 'I'm not going to address any claims about whether the "technical capabilities of their new model" are a thing.' But this is exactly what you need to do if you want to debunk what Anthropic is saying.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393507177924550https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393507177924550Sun, 12 Apr 2026 19:59:34 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:57:32 GMT]]>@dalias @lispi314 @GossiTheDog @azonenberg That's not debunking. Actual debunking would be to provide evidence that what Anthropic achieved was not actually technically difficult. Instead of doing that you chose to insult FreeBSD. Instead of providing technical arguments you displayed your ignorance of the last 20 years of progress in NFS. Fascinating how somebody can be so wrong and still sound so arrogant.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393499204949983https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393499204949983Sun, 12 Apr 2026 19:57:32 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:38:06 GMT]]>@trademark @lispi314 @GossiTheDog @azonenberg We're not making technical recommendations for the FreeBSD team here. Anyone who actually has reason to use NFS knows the risks/tradeoffs and if they're choosing to use something that's going to get them popped that's on them, not on the FreeBSD team.

We're debunking hype that's intentionally exploiting the ignorance of people like yourself about what component was actually vulnerable and whether it's actually something important and noteworthy like Anthropic's propaganda department would have folks believe.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393422779952024https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393422779952024Sun, 12 Apr 2026 19:38:06 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:36:39 GMT]]>@dalias @lispi314 @GossiTheDog @azonenberg Please tell this to the FreeBSD people, I am sure they will appreciate your insights.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393417051503919https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393417051503919Sun, 12 Apr 2026 19:36:39 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:36:13 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg Please direct your suggestions to the FreeBSD people directly, they are easily contactable.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393415373437105https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393415373437105Sun, 12 Apr 2026 19:36:13 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:31:09 GMT]]>@trademark @lispi314 @GossiTheDog @azonenberg Running a NFS server in kernelspace is no less backwards than running a httpd in kernelspace (something Linux folks actually tried at one point; it was eventually removed).

Yes there will always be apologists for it. I am not worried about being considered rude when I state that this is just completely untenable from both a security standpoint and a good software engineering standpoint.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393395434285979https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393395434285979Sun, 12 Apr 2026 19:31:09 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:27:31 GMT]]>@lispi314 @GossiTheDog @dalias @azonenberg That's not what they're saying though. From the wiki "krb5p
Kerberos authentication, integrity, and privacy. This is the most secure flavor of NFS. Not only does it provide authentication and integrity, but the entire RPC payload is encrypted. Thus a passive eavesdropper can see nothing but RPC headers. krb5p is a good choice for insecure networks, including wireless networks. "

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393381139849734https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393381139849734Sun, 12 Apr 2026 19:27:31 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:23:29 GMT]]>@dalias @azonenberg @GossiTheDog You are being incredibly rude and even more ignorant. FreeBSD support latest NFSv4 including Kerberos encryption and authentication. if you don't believe me ask on the relevant mailing list. Though if you do I recommend you tone down your rudeness.

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393365297426072https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393365297426072Sun, 12 Apr 2026 19:23:29 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 19:04:29 GMT]]>@trademark @azonenberg @GossiTheDog I don't know the project dynamics of this NFS server module, but I doubt it's something core folks are proud of. NFS is basically a domain of meeting very old legacy requirements, and for old die-hard Sun fans who run it by choice. Back in the day it had utterly zero access control. You just told the server "hey, I'm root" and it said "ok, cool". AIUI the vuln here is in part of an authentication layer bolted on.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393290604336122https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393290604336122Sun, 12 Apr 2026 19:04:29 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 18:57:03 GMT]]>@dalias @azonenberg @GossiTheDog You're saying nobody should run the NFS-server they are making. How is that not insulting? Why don't you go to their mailing lists and tell them to stop? For extra effect repeat the phrase you used: "I knew when I was like 15 that you don't run NFS unless you want to get popped."

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393261351938582https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393261351938582Sun, 12 Apr 2026 18:57:03 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 18:34:38 GMT]]>@trademark @azonenberg @GossiTheDog They do this to impress investors/C-suites and to keep the grift train going.

I'm not going to address any claims about whether the "technical capabilities of their new model" are a thing.

And to be impressive, yes, they need the thing they attack to be highly regarded in terms of its reputation for security and quality. "Vuln in NFS server module that runs on FreeBSD" does not impress. "Vuln in FreeBSD" does. And it's a lie.

I have no idea how you think this is "insulting to FreeBSD".

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393173246382147https://board.circlewithadot.net/post/https://hachyderm.io/users/dalias/statuses/116393173246382147Sun, 12 Apr 2026 18:34:38 GMT<![CDATA[Reply to I’ve had a bunch of people ask my thoughts on Anthropic’s Mythos. on Sun, 12 Apr 2026 18:28:20 GMT]]>@dalias @azonenberg @GossiTheDog Let me try explaining more clearly: Anthropic does this to demonstrate the technical capabilities of their new model. Your denigration of the utility of the FreeBSD NFS-server does not detract from that in the slightest, so Anthropic and their customers are not going to care in the slightest. You're being rather insulting to FreeBSD though, is that intentional?

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393148421675127https://board.circlewithadot.net/post/https://fosstodon.org/users/trademark/statuses/116393148421675127Sun, 12 Apr 2026 18:28:20 GMT