Kimi K3 just fixed 15 critical security bugs that Codex and Fable refused • Hacker News Board

Re: Kimi K3 just fixed 15 critical security bugs that Codex and Fable refused

#11

Post by Archit3ch » Mon, Jul 20, 2026, 11:29 PM UTC

Mixed feelings. Good for the defenders, also good for the attackers.

If Chinese models are distilled from Fable, does it mean that security questions will be answered at most to a level equivalent to the Opus fallback? Meanwhile the ~150 companies with access to Mythos have greater security capabilities. Assuming the Chinese models are not distilling Mythos.

Re: Kimi K3 just fixed 15 critical security bugs that Codex and Fable refused

#12

Post by jbritton » Tue, Jul 21, 2026, 3:56 AM UTC

I have a process I wrote that accepts commands on a socket. At one point Claude suggested testing it. I pretty much echoed back what Claude suggested and got blocked. All I could think was a regex matching “test” and “port” and it downgraded me. I switched back to Fable with slight rewording and was able to continue. This was for code running on my box in a Claude project folder where Claude saw me write the code. Anthropic has put zero thought into this.

Re: Kimi K3 just fixed 15 critical security bugs that Codex and Fable refused

#13

Post by syrrim » Tue, Jul 21, 2026, 4:06 AM UTC

Archit3ch wrote: post #11

Mixed feelings. Good for the defenders, also good for the attackers. If Chinese models are distilled from Fable, does it mean that security questions will be answered at most to a level equivalent to the Opus fallback? Meanwhile the ~150 companies with access to Mythos have greater security capabilities. Assuming the Chinese models are not distilling Mythos.

The "head of strategic futures" at openai stated "I don't think [kimi's] performance can be explained away by distillation". So you're premise is likely faulty.