Live data from Hacker News

NSA is using Anthropic's Mythos despite blacklist

axios.com

131–140 of 378 posts

Re: NSA is using Anthropic's Mythos despite blacklist

#131
post #118
post #59

The whole artificial scarcity Anthropic created around Mythos / Glasswing is quite brilliant to be honest (I’m Not saying ethical, just brilliant). The commercial gains are one side of course. But consider this: Gets labelled supply chain risk by the pentagon. Hypes up what they claim to be the most advanced hacking tool on the planet. This puts the US government into a loose / loose position. Either deny the NSA acc…

> The whole artificial scarcity Anthropic created around Mythos / Glasswing is quite brilliant to be honest Isn’t that just the same strategy OpenAI has used over and over? Sam Altman is always “OMG, the new version of ChatGPT is so scary and dangerous”, but then releases it anyway (tells you a lot about his values—or lack thereof) and it’s more of the same. Pretty sure Aesop had a fable about that. “The CEO who crie…

Anthropic has not in fact released it, and it does in fact appear to be that dangerous, judging by the flood of vulnerability reports seen by e.g. Daniel Stenberg.

Certainly it’s a strategy OpenAI has used before, and when they did so it was a lie. Altman’s dishonesty does not mean it can never be true, however.

Re: NSA is using Anthropic's Mythos despite blacklist

#132
post #68
post #59

The whole artificial scarcity Anthropic created around Mythos / Glasswing is quite brilliant to be honest (I’m Not saying ethical, just brilliant). The commercial gains are one side of course. But consider this: Gets labelled supply chain risk by the pentagon. Hypes up what they claim to be the most advanced hacking tool on the planet. This puts the US government into a loose / loose position. Either deny the NSA acc…

'Anthropic is / isn't lying about Mytho's capabilities' is the less interesting conversation. The more interesting one is: 1. Assuming even incremental AI coding intelligence improvements 2. Assuming increased AI coding intelligence enables it to uncover new zero day bugs in existing software 3. Then open source vs closed source and security/patch timelines will all need to fundamentally change Whether or not Mythos…

> Which begs questions about whether closed source will provide any protection (it doesn't appear so, given how able AI tools already are at disassembly?)

Disassembly implies that you're still distributing binaries, which isn't the case for web-based services. Of course, these models can still likely find vulnerabilities in closed-source websites, but probably not to the same degree, especially if you're trying to minimize your dependency footprint.

Re: NSA is using Anthropic's Mythos despite blacklist

#134

Earlier quoted context omitted.

Because your pronounce them backwards. "Loose" is a short word that ends sharply, but "lose" is a long word that slowly peters out. They should be the other way around imo.

If we're allowed to make modifications here then it should really be lose => looze and loose => luce

I think that would make "loosely" not work out. Lucely/lucly catch the hard C there. I'm good with loozing/loozer, looks kind of funny though.

Re: NSA is using Anthropic's Mythos despite blacklist

#135

Earlier quoted context omitted.

Worth noting that Trump was one who labeled them a supply chain risk for the horrible crime of setting really basic guardrails around usage. (And it's "lose" btw)

Governments are sovereign: they tell people what to do (by making laws, by exercising a monopoly of violence, etc), and nobody tells them what to do. Governments also fight wars, which means lives depend on the government's ability to command. Private companies make products. When those products were plowshares or swords or missiles, the company didn't really have a say over how they were used, and could be compelled…

[deleted]

Re: NSA is using Anthropic's Mythos despite blacklist

#137
post #59

The whole artificial scarcity Anthropic created around Mythos / Glasswing is quite brilliant to be honest (I’m Not saying ethical, just brilliant). The commercial gains are one side of course. But consider this: Gets labelled supply chain risk by the pentagon. Hypes up what they claim to be the most advanced hacking tool on the planet. This puts the US government into a loose / loose position. Either deny the NSA acc…

> This puts the US government into a loose / loose position. You might even call it... a tight spot

This is not the first time Pete Hegseth charged into a bar, started swinging his fists and screaming "don't you know who my father is", only to find his junk in a vise with no graceful way get it out.

Re: NSA is using Anthropic's Mythos despite blacklist

#138

Earlier quoted context omitted.

Worth noting that Trump was one who labeled them a supply chain risk for the horrible crime of setting really basic guardrails around usage. (And it's "lose" btw)

Governments are sovereign: they tell people what to do (by making laws, by exercising a monopoly of violence, etc), and nobody tells them what to do. Governments also fight wars, which means lives depend on the government's ability to command. Private companies make products. When those products were plowshares or swords or missiles, the company didn't really have a say over how they were used, and could be compelled…

> the essence of government is autocratic sovereignty

*was

Democracy was and is radical for putting the common people in charge of the government. The right to petition for redress of grievances is literally in the first amendment. Government is a social contract, enforced with state violence on one end and mob violence on the other.

If you want to return to autocratic rule, I hear North Korea is lovely this time of year.

Re: NSA is using Anthropic's Mythos despite blacklist

#139
post #100
post #59

The whole artificial scarcity Anthropic created around Mythos / Glasswing is quite brilliant to be honest (I’m Not saying ethical, just brilliant). The commercial gains are one side of course. But consider this: Gets labelled supply chain risk by the pentagon. Hypes up what they claim to be the most advanced hacking tool on the planet. This puts the US government into a loose / loose position. Either deny the NSA acc…

They created the model specifically to play this game.

They said they designed it to be a better coding model. Something that has long been true: better software engineers are better vulnerability hunters as well. I think we are seeing that play out with Mythos.

Re: NSA is using Anthropic's Mythos despite blacklist

#140

Earlier quoted context omitted.

Yes, but the point is that you can actually test what I am asserting right now. Can you use mythos and reproduce anthropics claims?

But I don't need to test that; we all know it's possible. Known vulnerabilities are in the training set! Mythos is being claimed to have new abilities , right? What would testing the old model on a different use case do?

You’re conflating types of vulnerabilities with the vulnerability itself. Take CVE-2026-4747 which was supposedly found by mythos. The actual issue here is a stack overflow. Opus can find those.
Post reply on HN