Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Post-Mythos Cybersecurity: Keep calm and carry on

cephalosec.com

Post reply on HN
Print view View original

1–10 of 83 posts

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#3

Post by dude250711 »

Versipelle wrote: post #2

I've been brewing on this topic since Mythos preview was announced. As Mythos got finally released, then banned, then released again under U.S. government control, it was time to finally flesh it out and use it as a way to exit the lurker-zone on HN !

"Released" is doing some heavy lifting here.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#4

Post by Versipelle »

dude250711 wrote: post #3
Versipelle wrote: post #2

I've been brewing on this topic since Mythos preview was announced. As Mythos got finally released, then banned, then released again under U.S. government control, it was time to finally flesh it out and use it as a way to exit the lurker-zone on HN !

"Released" is doing some heavy lifting here.

Fair, let's say a heavily staggered come back.

I was actually pleased to see OpenAI openly (although timidly) complaining about the situation in their latest announcement, framing it as an unsustainable system.

One can only guess the outrage in the news if the Chinese government had been the first to pull this kind of stunt.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#5

Post by petcat »

Versipelle wrote: post #4
dude250711 wrote: post #3

Earlier quoted context omitted.

"Released" is doing some heavy lifting here.

Fair, let's say a heavily staggered come back. I was actually pleased to see OpenAI openly (although timidly) complaining about the situation in their latest announcement, framing it as an unsustainable system. One can only guess the outrage in the news if the Chinese government had been the first to pull this kind of stunt.

> outrage in the news if the Chinese government had been the first to pull this kind of stunt.

I suspect that the Chinese government "pulls this kind of stunt" often but just nobody ever hears about it because their society is not free to complain about such a thing publicly.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#7

Post by datakan »

The fear porn around this all has been horrible. I work in Cybersecurity and Mythos is all the vendors will talk about because they want to sell something. It started the day of the announcement which is what told me it was all BS. They had no information about it yet would happily tell me about all their solutions for it.

Anyone in my profession worth a damn will tell you the vast majority of security issues are related to bad configurations and bad practices + accidents and bad luck. Vulnerable software is a problem but basic defense in depth will either mitigate or drastically reduce attack surface. Mythos does nothing to change that.

The technical debt at companies is the largest security threat. That, and layer 8 which is the people factor. The amount of silliness I've seen from people and companies as a whole is truly hard to verbalize. I've seen banks that gave every employee from the janitor up to the CEO domain admin access due to a crappy application that was written in 2004 that they never updated. I've seen a fortune 250 company write its own internal routing protocol that was basically clear text traffic that dated back to the 1990's and was never retired because, why not. I've seen contractors infect entire fab's in the chip industry because they plugged an infected USB stick into a 30 year old tool that hadn't seen an update in over 20. Then when the fab came back up, they did it again the next day.

Ultimately, Mythos is just another tool in the toolbox. It's great to find new vulns but it is incredibly short sighted to think it will move the needle in any meaningful way in the security industry.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#9

Post by altcognito »

datakan wrote: post #7

The fear porn around this all has been horrible. I work in Cybersecurity and Mythos is all the vendors will talk about because they want to sell something. It started the day of the announcement which is what told me it was all BS. They had no information about it yet would happily tell me about all their solutions for it. Anyone in my profession worth a damn will tell you the vast majority of security issues are rel…

Forget whether it is Mythos or GPT 5.6, or any other specific model. SOTA models have tool likely have the knowledge and capability to create zero days from nearly every discovered and many undiscovered vulnerabilities. In the wrong hands can deploy and generate malware and submarine code that would go undetected behind secured systems. Add in the ability to clone voices, create mass social engineering campaigns.

Yet "Just another tool in the toolbox." I mean, that's not wrong!

Post reply on HN