Project Glasswing: Securing critical software for the AI era

Post by endunless » Tue, Apr 07, 2026, 7:55 PM UTC

conradkay wrote: post #98

endunless wrote: post #15

Another Anthropic PR release based on Anthropic’s own research, uncorroborated by any outside source, where the underlying, unquestioned fact is that their model can do something incredible. > AI models have reached a level of coding capability where they can surpass all but the most skilled humans at finding and exploiting software vulnerabilities I like Anthropic, but these are becoming increasingly transparent att…

I would've basically agreed with you until I'd seen this talk: https://www.youtube.com/watch?v=1sd26pWhfmg Maybe a bad example since Nicholas works at Anthropic, but they're very accomplished and I doubt they're being misleading or even overly grandiose here See the slide 13 minutes in, which makes it look to be quite a sudden change

Post by zb3 » Tue, Apr 07, 2026, 7:57 PM UTC

Post by [deleted] » Tue, Apr 07, 2026, 8:02 PM UTC

supern0va wrote: post #137

dakolli wrote: post #107

I guess we can throw out the idea that AGI is going to be democratized. In this case a sufficiently powerful model has been built and the first thing they do is only give AWS, Microsoft, Oracle ect ect access. If AGI is going to be a thing its only going to be a thing, its only going to be a thing for fortune 100 companies.. However, my guess is this is mostly the typical scare tactic marketing that Dario loves to pu…

>However, my guess is this is mostly the typical scare tactic marketing that Dario loves to push about the dangers of AI. Evaluate it yourself. Look at the exploits it discovered and decide whether you want to feel concerned that a new model was able to do that. The data is right there.

Post by fsflover » Tue, Apr 07, 2026, 8:05 PM UTC

fsflover wrote: post #117

georgemcbay wrote: post #106

Earlier quoted context omitted.

> It will be interesting to see where this goes. If its actually this good, and Apple and Google apply it to their mobile OS codebases, it could wipe out the commercial spyware industry, forcing them to rely more on hacking humans rather than hacking mobile OSes. It will likely cause some interesting tensions with government as well. eg. Apple's official stance per their 2016 customer letter is no backdoors: https://…

> If its actually this good, and Apple and Google apply it to their mobile OS codebases, it could wipe out the commercial spyware industry If Apple and Google actually cared about security of their users, they would remove a ton of obvious malware from their app stores. Instead, they tighten their walled garden pretending that it's for your security.

Post by conradkay » Tue, Apr 07, 2026, 8:07 PM UTC

tptacek wrote: post #134

josh-sematic wrote: post #86

Must be nice to be in a position to sell both disease and cure.

That's exactly not what they're doing. They aren't creating operating system vulnerabilities. They're telling you about ones that already existed.