Ask HN: Isn't Anthropic currently doing "security through obscurity" for Mythos?
2 comments
"a bunch of companies" have "probably" fixed "some issues"? There are huge security risks for government IT systems around the world, giving attackers tools cannot be understood to be a direct solution and is not viable without more buy-in.
It's been more than 2 months since Mythos was released to a select group of companies to prevent this scenario. I wouldn't mind if Anthropic were to delay the release as many months as it takes, as long that at some point, they release the full model to everyone.
Because what are you implying otherwise? "There are huge vulnerabilities everywhere, it'd be bad if people were to find them!" How is this suddenly the acceptable take towards cybersec? Wouldn't you WANT them to be found and then fixed? If anything, today it's mythos, in 2 years it's OpenMythos, in 6 years it's DeepMythos... All AI converges towards progress anyways
Everyone keeps warning against the huge vulnerabilities as an excuse to not release the model, wouldn't you want to live in a world where every piece of code actually survives the model instead?
Because what are you implying otherwise? "There are huge vulnerabilities everywhere, it'd be bad if people were to find them!" How is this suddenly the acceptable take towards cybersec? Wouldn't you WANT them to be found and then fixed? If anything, today it's mythos, in 2 years it's OpenMythos, in 6 years it's DeepMythos... All AI converges towards progress anyways
Everyone keeps warning against the huge vulnerabilities as an excuse to not release the model, wouldn't you want to live in a world where every piece of code actually survives the model instead?
But ultimately why not allow people to use it to find vulnerabilities and then fix them? If mythos is so good and the average Joe can just hack NASA in 2 prompts, wouldn't you rather he did, and then fix the vulnerability? What good does it do any of us to just shush everyone instead?