Viewing profile — ZrArm

> Maybe curl is significantly better hardened than most projects? Meanwhile from [1]: "Not even half-way through this #curl release cycle we are already at 11 confirmed vulnerabili…

From Mozilla post [1]: "...After fixing the initial set of issues that Anthropic sent to us in February, we built our own harness atop our existing fuzzing infrastructure. We began…

> After one month, most partners have each found hundreds of critical- or high-severity vulnerabilities in their software. And at the moment we have reports from like around 5(?) c…

> As much as I’d like to share in the skepticism, the very beginning of the article states it very plainly — this is a step function. To be fair, they can't say "You know, Mythos i…

> Unless you have reasons to not believe the dozens of credentialed, well respected people in the field that have already shared their opinions after working with mythos. Exactly t…

It makes sense, thanks, even though that wording is still somewhat confusing.

> Mythos did in fact write PoCs for all bugs that crash with demonstration of memory-unsafe behavior (e.g. use-after-free, out-of-bounds reads/writes, etc). But report [1] says tha…