Live data from Hacker News

Expanding Project Glasswing

anthropic.com

141–150 of 261 posts

Re: Expanding Project Glasswing

#143

I'll share the first-hand account I recently got from someone else. > We've used it at work > it is... not as hype as everyone is concerned about > I'd argue the framework around it for security scanning is the arguably more useful side of the tool, definitely doesnt take a huge model to get all the issues it flagged on our systems > For us, it absolutely flooded us with noise > I mean hundreds if not thousands of fa…

I'm pretty impressed with regular Claude Code with Opus 4.7/4.8 in finding vulnerabilities in our code. Maybe 70% are false positives though. It's a lot of work to manually push back on the findings. Still worth it.

Re: Expanding Project Glasswing

#144
post #78
post #40

It’s clear that Anthropic has run out of the compute capacity needed to serve Mythos publicly. They’re using security concerns to mask their inability to deliver the model at scale, while still trying to maintain their lead over OpenAI. As a result, they’ve chosen to release it privately under the banner of an “ethical” rollout.

I find this line of reasoning highly dubious. Yes, Anthropic is compute constrained, even after the SpaceX Colossus deal. But supply constraints are the normal operating mode of any market. Anthropic could choose to serve whatever models it pleases at whatever price points it chooses and let the market decide where the value is. If Mythos at $X overwhelms their capacity, they could just charge $X+1 . If still overwhe…

During periods of market exuberance, it’s in the vendors interest not to reveal where exactly x+1 is. At the moment, everyone just guesstimates the company’s TAM. Bringing certainty to that guesstimate cuts Anthropic off from the most exuberant market participants, bringing their post-IPO price down unnecessarily.

Re: Expanding Project Glasswing

#145

Is this just one giant marketing plot?

The week before they released Mythos to governments they had all their source code stolen. It's all about improving their image and creating propoganda.

It wasn't "all their source code", it was the source code to Claude Code: not really any of their internal secret sauce, at least directly.

Re: Expanding Project Glasswing

#146
post #128

In the meantime, not everyone with actual access to the model are all that impressed. https://cyberplace.social/@GossiTheDog/116679693992983945

“Cybersecurity weather person and award winning shitposter.” why are they someone we should pay attention to the opinion of?

That's someone who is confident enough to have an evidently successful enough career to be able to access Mythos in its currently-limited rollout and yet not take themselves terribly seriously online.

Realistically their opinion deserves to hold more weight than the median HN comment.

Re: Expanding Project Glasswing

#147

I'll share the first-hand account I recently got from someone else. > We've used it at work > it is... not as hype as everyone is concerned about > I'd argue the framework around it for security scanning is the arguably more useful side of the tool, definitely doesnt take a huge model to get all the issues it flagged on our systems > For us, it absolutely flooded us with noise > I mean hundreds if not thousands of fa…

It seems like there is a genuine communication breakdown between management and engineering. Engineers know that there are vulnerabilities all over the place and that there have been for ages and that where the rubber hits the road every vulnerability does not represent a successful exploit by some nefarious actor.

Management can often treat cybersecurity like a black box that represents millions upon millions in liability. If Mythos represents an opportunity to bring management's understanding of the amount of "security vulnerability debt" everyone carries into the real world, it might be a good thing

Re: Expanding Project Glasswing

#149

Anthropic has the marketing of a weight loss product. - They still claim 10000 issues, but they found only one in curl. - They did not find rsync issues but Claude rather introduced rsync issues. - Facebook is a member of this cult program but Mythos did not find the account takeover flaw. - Mythos did not find the issues in Anthropic's own Bun rewrite . They will not release Mythos because it would be exposed as a f…

To be fair the curl author is excellent at what he does.

Re: Expanding Project Glasswing

#150
post #134

Is this just one giant marketing plot?

There's a lot of speculation that it is indeed a marketing plot and the model is just a step improvement over current capabilities... and the real reason they aren't releasing the model is they are compute constrained and cannot serve the model. To my knowledge there's no proof of this however, but given the fact that literally 60 days ago they made Mythos out to be the end of the world and last Friday they announced…

Or just control of supply and demand. If they can charge twice as much serving half as many customers, that leaves a lot of potential future customers leftover.
Post reply on HN