Live data from Hacker News

NSA director: 'Mythos "broke into almost all of our classified systems in hours"

economist.com

81–90 of 131 posts

Re: NSA director: 'Mythos "broke into almost all of our classified systems in hours"

#82
If the NSA director said this, literally and verbatim, then him, and maybe several of his predecessors, should be remembered as the worst directors the NSA has ever had.

LLMs cannot create anything new, they can only repeat their training data. Ergo, the NSA director just admitted that their systems a) can be accessed from the Internet, b) have known, already exploitable (and probably already fixed) bugs, and enough of them to do the job in mere hours.

This is shameful.

Edit: From what I can tell, the NSA director didn't literally and verbatim say this, and it is second hand and (possibly) vastly misconstrued.

Somebody lied, I'm not sure who, but any claim Mythos can suddenly work, when every LLM before it couldn't, needs to be taken with a gigantic supermassive grain of salt.

Re: NSA director: 'Mythos "broke into almost all of our classified systems in hours"

#83
post #67

Earlier quoted context omitted.

I’m not familiar with this, but what does “solved” mean in this case? Guaranteed inability to compromise systems?

Pretty much. If you've got a microkernel / capabilities based OS, the amount of mischief that someone can cause is severely reduced. It's my belief that we can have general purpose, easy to use, secure computing for everyone. No UAC crap, or horrible systems like AppArmor, no virus scanners, etc... just computers that do what you want, and only what you want. We could have had it decades ago, if things had happened i…

Can you recommend any modern systems that behave like that?

Re: NSA director: 'Mythos "broke into almost all of our classified systems in hours"

#86
This soundbite is pure narrative. Most of the security of hi-side systems was simply being air-gapped. It is otherwise full of COTS software, much of it quite dated. You don’t need a fancy widget to break into them, simple access for a competent pen-tester is adequate. Don’t treat the fear-mongering as a scientific revelation; it ain’t.

Re: NSA director: 'Mythos "broke into almost all of our classified systems in hours"

#87
post #29
post #15

Earlier quoted context omitted.

The concept of infinity claims that the dog eventually becomes Shakespeare. The same way we handled encryption, even before Alan Turing codes were broken and evolved. Last, it is a huge advantage to have the machine/mind and to evolve from there. P.S. Even if you go back to lemon juice on paper there may be a thief around that knows the trick.

> The concept of infinity claims that the dog eventually becomes Shakespeare. The ability to reproduce an exact copy of hamlet does not make one Shakespeare. A monkey on a typewriter may very well generate Shakespeare eventually, but it wouldn't understand Shakespeare then any more than it could immediately. Likewise a dog may put together some string of text that includes a derivation of calculus, but at no time wil…

And by dog you mean lLM

Re: NSA director: 'Mythos "broke into almost all of our classified systems in hours"

#88
post #67

Earlier quoted context omitted.

I’m not familiar with this, but what does “solved” mean in this case? Guaranteed inability to compromise systems?

Pretty much. If you've got a microkernel / capabilities based OS, the amount of mischief that someone can cause is severely reduced. It's my belief that we can have general purpose, easy to use, secure computing for everyone. No UAC crap, or horrible systems like AppArmor, no virus scanners, etc... just computers that do what you want, and only what you want. We could have had it decades ago, if things had happened i…

How much does this limit what a computer can do? E.g. if I converted an Ubuntu desktop into a "secure microkernel", what functionality would be lost?

Re: NSA director: 'Mythos "broke into almost all of our classified systems in hours"

#89

Earlier quoted context omitted.

We'll see Mythos 2.0 patching all the Mythos 1.0 vulnerabilities before we see an open-source Mythos 1.0. What matters isn't the power of the tool, but whether defenders have had time to secure against. Today's cyberweapon is tomorrow's laughably obsolete. Stuxnet used to be a national security threat, now I'm not sure it would be useful for anything.

They were not saying f Open Spurce Mythos 1.0. They were talking about performance / capability parity in other open source models.

Yeah, and by the time that happens, we will have seen Mythos 2.0 released

Re: NSA director: 'Mythos "broke into almost all of our classified systems in hours"

#90
post #67

Earlier quoted context omitted.

I’m not familiar with this, but what does “solved” mean in this case? Guaranteed inability to compromise systems?

Pretty much. If you've got a microkernel / capabilities based OS, the amount of mischief that someone can cause is severely reduced. It's my belief that we can have general purpose, easy to use, secure computing for everyone. No UAC crap, or horrible systems like AppArmor, no virus scanners, etc... just computers that do what you want, and only what you want. We could have had it decades ago, if things had happened i…

That would stop a lot of kernel-based exploits but you can also do a lot of damage just as a user of course.
Post reply on HN