Live data from Hacker News

Has Mythos just broken the deal that kept the internet safe?

martinalderson.com

21–30 of 65 posts

Re: Has Mythos just broken the deal that kept the internet safe?

#21
post #20
post #16

Earlier quoted context omitted.

> I guess when an AI proves that P!=NP, What would be the practical impacts of this discovery?

Likely all existing cryptography would become crackable, possibly some of it, very readily.

I think you read it backwards - that's a possible consequence of P==NP, not P!=NP.

Re: Has Mythos just broken the deal that kept the internet safe?

#22
post #2

> According to Anthropic, Mythos Preview successfully generates a working exploit for Firefox's JS shell in 72.4% of trials Why are AI people so dramatic? Ok, there is yet another JS sandbox escape - not the first one, not the last one. It will be patched, and the bar will be raised for a bit... at least until the next exploit is found. If anything, AI will make _weaponized_ exploits less likely. Before, one had to f…

Further, Opus identified most of the vulnerabilities itself already. It just couldn’t exploit them.

Mythos seems much, much more creative and self directed, but I’m not yet convinced the core capabilities are significantly higher than what’s possible today.

The full price of finding the vulnerabilities was also something like $20k. That’s a price point that brings a skilled professional in to accomplish the same task.

Re: Has Mythos just broken the deal that kept the internet safe?

#23
post #20
post #16

Earlier quoted context omitted.

> I guess when an AI proves that P!=NP, What would be the practical impacts of this discovery?

Likely all existing cryptography would become crackable, possibly some of it, very readily.

Isn’t it the opposite?

Re: Has Mythos just broken the deal that kept the internet safe?

#24
post #20
post #16

Earlier quoted context omitted.

> I guess when an AI proves that P!=NP, What would be the practical impacts of this discovery?

Likely all existing cryptography would become crackable, possibly some of it, very readily.

(Assuming you mean P==NP)

Would it become crackable, or just theoretically crackable?

E.g. it's one thing to show it's possible to fly to Mars, it's another thing to actually do it.

Re: Has Mythos just broken the deal that kept the internet safe?

#25

No, you have not been safe all this time. Every security person I know has known for ages that you need to run NoScript to block all javascript if you want to be remotely secure on the web. We also know about all the 0days found on all browsers every year. Same for mobile devices. You have always been insecure. AI just makes it slightly faster to do what hackers have been doing for ages. BTW: Mythos is not new. OpenA…

> Anthropic's PR is so good that people genuinely don't understand that OpenAI's models are superior to Anthropic's

That is a provocative statement that would be especially interesting if you were to add some supporting evidence.

Re: Has Mythos just broken the deal that kept the internet safe?

#26

No, you have not been safe all this time. Every security person I know has known for ages that you need to run NoScript to block all javascript if you want to be remotely secure on the web. We also know about all the 0days found on all browsers every year. Same for mobile devices. You have always been insecure. AI just makes it slightly faster to do what hackers have been doing for ages. BTW: Mythos is not new. OpenA…

I've been mystified by how sticky Anthropic's marketing is for a while. It's really surprising given how poorly they run community relations compared with OAI, and how they're just now starting to be transparent.

Re: Has Mythos just broken the deal that kept the internet safe?

#27

No, you have not been safe all this time. Every security person I know has known for ages that you need to run NoScript to block all javascript if you want to be remotely secure on the web. We also know about all the 0days found on all browsers every year. Same for mobile devices. You have always been insecure. AI just makes it slightly faster to do what hackers have been doing for ages. BTW: Mythos is not new. OpenA…

Noscript breaks 99% of websites these days, entirely. Netsec freaks are so disingenous "BTW: Mythos is not new. OpenAI literally released a press release 1 month ago " these two sentences make no semantic sense together

The claim that you need to disable JavaScript to be secure is bullshit anyway, otherwise disabling JavaScript would be standard practice in any security-critical environment such as high-level government offices, which it most certainly isn’t.

Re: Has Mythos just broken the deal that kept the internet safe?

#28
post #13
post #2

> According to Anthropic, Mythos Preview successfully generates a working exploit for Firefox's JS shell in 72.4% of trials Why are AI people so dramatic? Ok, there is yet another JS sandbox escape - not the first one, not the last one. It will be patched, and the bar will be raised for a bit... at least until the next exploit is found. If anything, AI will make _weaponized_ exploits less likely. Before, one had to f…

You’re asking why people are being “dramatic” about an automated system that can do what highly specialized experts get paid hundreds of thousands of dollars to do? It’s just fascinating to see how AI’s accomplishments are being systematically downplayed. I guess when an AI proves that P!=NP, I’m going to read on this forum “so what, mathematicians prove conjectures all the time, and also, we pretty much always knew…

It would be warranted if Mythos could jailbreak an up-to-date iPhone. (Maybe it can?) That would actually also be nice, “please rewrite without Liquid Glass”.

Re: Has Mythos just broken the deal that kept the internet safe?

#29
post #21
post #20

Earlier quoted context omitted.

Likely all existing cryptography would become crackable, possibly some of it, very readily.

I think you read it backwards - that's a possible consequence of P==NP, not P!=NP.

Yes, I meant the equality.

We already operate on the assumption that P ≠ NP, so little would change if that were proved.

Re: Has Mythos just broken the deal that kept the internet safe?

#30

I tried to read the article and what I got out of it was that the author believes that the deal that keeps the internet safe is that we just don't try to break it hard enough. Ignoring all the state actors who do that all the time. Seems something of a unusual take on the state of the world

This is how a lot of the world works. Certain things aren't done very much because it takes a lot of human effort to do those things and that creates a status-quo.

For example a lot more people would sue eachother for petty things if it suddenly became very easy and cost efficiant. Its not, so they dont.

Another example of AI doing this exact type of thing in another realm: In the past convincing someone you were somebody they should give money to for a scam was very possible to do, but also difficult and not very cost efficiant. You could try to impersonate someone's daughter or a police officer, but it took a lot of effort to get it right.

Now, with voice mimicking ai, deepfakes, social media to mine for personal info, etc its not as difficult and so, very likely, its becoming a bigger problem than it was.

Post reply on HN