I like the Register's headline: "Anthropic’s bug-hunting Mythos was greatest marketing stunt ever, says cURL creator"

[taschenorakel@mastodon.green]

@bagder Yeah, stupid age of click-bait. Something everyone doing relevant stuff these days has to cope with somehow.

[jigmedatse@social.openpsychology.net]

@bagder@mastodon.social Something very "stunt like" seemed to be up. It was making pretty extraordinary claims, without extraordinary evidence. Not saying it's nothing, just I don't know. Thanks for this. Well, all of it?

[_elena@mastodon.social]

@bagder aw I LOVE to see headlines like this one

especially as I’m in the middle of reading @emilymbender and @alex’s superb book “The AI Con”

[jeremiah_@mastodon.social]

@bagder You didn’t say anything like that. You don’t talk that way. Why do they turn everything into clickbait?

[screwlisp@gamerplus.org]

@bagder to be honest, this journalist's writing is quite hard for me to read

> [Stenberg] concluded the hype was mainly marketing

I am not entirely sure how to read this paragraph.

[screwlisp@gamerplus.org]

@bagder by the way, it is probably worth remarking what the hiccup that delayed/prevented your access to glasswing was.

IIRC (check the news) the access to the model was being provided by an uncryptographic https path foo.bar/mythos-project or something, and at least one "hacker" just guessed the endpoint with reference to public model paths, and then had direct access to the model.

[jupiter@mastodon.gamedev.place]

@bagder "Stunt" as in "stunted"? It was so fucking obvious -.-

[phoenixwright@ieji.de]

@bagder
But do you agree that it's a marketing stunt, but it's not the greatest?

[pedro_mateus@mas.to]

@bagder

How about that? You don't even need AI to hallucinate stuff!

[philvuchetich@bsd.network]

@bagder your article made it abundantly clear that curl has already been extensively audited for years using all of the tools and techniques available. It is nice that a tool can find a single new vulnerability, around 20 bugs, with a small number of false positives.

Edited to correct vulnerability/bugs.

[bagder@mastodon.social]

@philvuchetich it found more than one bug actually. One vulnerability, but something around twenty bugs

[agowa338@chaos.social]

@bagder

come on you said that from what you can tell it isn't that impressive that's basically a failing grade.

[gimulnautti@mastodon.green]

@bagder Damn! You should put some kind of notice on them for misquoting you, though!

This might escalate

[agitatra@berlin.social]

@bagder You should have and you could have!

[philvuchetich@bsd.network]

@bagder thanks - I corrected my post. I was thinking vulnerabilities and not bugs.

[cambria@hachyderm.io]

@bagder
"I didn't say that," said cURL creator.

[lumotraq@mastodon.social]

@bagder interesting to get some more details on how these things work. It does get more difficult - more marketing headlines, more "WOW" moments.