I'll share the first-hand account I recently got from someone else.<p>> We've used it at work<p>> it is... not as hype as everyone is concerned about<p>> I'd argue the framework around it for security scanning is the arguably more useful side of the tool, definitely doesnt take a huge model to get all the issues it flagged on our systems<p>> For us, it absolutely flooded us with noise<p>> I mean hundreds if not thousands of false positives or minor issues or not applicable<p>> For every one reasonable issue<p>> The biggest issue it created was the execs treated every issue it produced like it was a drop everything and fix the issue type deal<p>> I'm talking company wide drop all things "we need to patch nginx because this module that no one uses and is disabled by default has this RCE vulnerability™<p>> Or "all ec2 AMIs need to be upgraded because it flagged a a version specific docker vulnerability", it flagged every single machine with docker regardless of if the actual vulnerability was relevant<p>> Vulnerability was with a very specific Auth plugin configuration you could enable with docker and specifically the Mosley docker compatible tool, but it is clear it only knew there was a vulnerability in docker, not if it was applicable or not<p>> Meanwhile dirtyfrag and friends not a single peep from btw despite it allowing for container escape<p>> Idk, I was underwhelmed with the quality of the reporting it gave really. If the company allowed me to get information about all the infrastructure in our entire organisation to run Claude over it repeatedly looking for recent CVEs I'm sure I could produce the same results...
It seems like there is a genuine communication breakdown between management and engineering. Engineers know that there are vulnerabilities all over the place and that there have been for ages and that where the rubber hits the road every vulnerability does not represent a successful exploit by some nefarious actor.<p>Management can often treat cybersecurity like a black box that represents millions upon millions in liability. If Mythos represents an opportunity to bring management's understanding of the amount of "security vulnerability debt" everyone carries into the real world, it might be a good thing
I had a geniunely surreal conversation with the security team the past week, it went like:<p>'Hi, we are reaching out to you because our tool flagged a large data transfer between such and such services'<p>'Wait, the source endpoint is and internal service, the target endpoint is an internal S3 bucket (I was doing a routine DB backup) Neither are reachable from the internet. How is it a security issue?'<p>'Our tool has flagged it'
It won't bring understanding though is the problem. You get situations like the parent, where the execs don't have the knowledge, time, or care to learn beyond "vulnerability bad, must patch now"<p>Execs/Management types getting extra visibility into the technical side, in my experience, has only ever resulted in additional but meaningless work, like just checking boxes on a compliance/audit checklist without actually considering the impacts of those changes, or whether a company is actually vulnerable to the disclosed CVE.<p>It's along the same lines of the BS I deal with day to day from upper management arguing back with "But ChatGPT said..." meanwhile pasting some hallucinated crap that doesn't even apply to our environment.<p>LLMs are basically a dunning-kruger machine for management. Engineering is best left alone and trusted to do what they are being paid to do.
[dead]
In other words it is equivalent to spending a million dollars on an audit by a software security consulting company
Or to RedHat for rewriting Python core 500 times.<p>The "humans do it too" argument gets tiresome. Even if the consulting company fails, the money goes back to employees and back into the real economy. Now it goes to Don Amodei.<p>The consulting company could be local, which provides a higher degree of confidence, though not proof, that no data is exfiltrated to the US.<p>And so on.
I think Opus 4.6 and Mythos overall/marketing wise are key points because it told the world that LLMs are now a critical / usefull tool for security audits.<p>Its aligns with the significant jump in helpfulness in CTF.<p>But i think its good to hear that its not that crazy good. Everything slowing it down is good.
why are folks looking at the output of the first pass?<p>my understanding, and experience, is that you 1. run a bunch of sessions with small permutations to create <i>variety</i>, 2. run more sessions dedupe reports into a smaller collections of potential vulns, 3. run a handful of agents at max effort to write PoCs + write-ups, 4. rank findings, 5. finally look at what, if anything that, was found. maybe ask questions, try and understand if the PoC is running against a realistic setup.<p>until you can confirm a vuln report is valid, you must assume it is invalid.
I thought one of the advantages of Glasswing was that it could produce a PoC for you. Was it producing working PoC's?
This reminds me of when I added Snyk to our CI/CD and brought development to a standstill
I'm pretty impressed with regular Claude Code with Opus 4.7/4.8 in finding vulnerabilities in our code. Maybe 70% are false positives though. It's a lot of work to manually push back on the findings. Still worth it.
It's similar with performance optimizations.<p>One example was Claude thinking we could optimize converting vector tiles to raster by operating in float32 rather than float64. It turned out the library we have to use casts to float64 anyway, so the work of casting to 32 then to 64 rather than staying at 64 actually slowed the path down by 12%.<p>Yet it also finds the odd thing that isn't very intuitive but leads to marked improvements I never would have uncovered because... Well, as a human with only 24 hours in a day, there's no way I'll turn over every leaf and find these items on my own.<p>I'm totally fine with the false positives because they're so easy the verify.
It’s clear that Anthropic has run out of the compute capacity needed to serve Mythos publicly.<p>They’re using security concerns to mask their inability to deliver the model at scale, while still trying to maintain their lead over OpenAI. As a result, they’ve chosen to release it privately under the banner of an “ethical” rollout.
Jack Clark, co-founder of Anthropic said the following at an Oxford lecture last week ([0], at around 10 and 12 mins):<p><pre><code> "It's a technology that we do not fully understand because it's more grown than made. And it is a technology that you can concoct plausible scenarios where it could kill every single person on the planet. So to think building this technology is without risk would be an act of hubris or insanity.
</code></pre>
[...]<p><pre><code> The technology is in fact so powerful that I should clearly state that if it was possible to elegantly slow the development of this technology to give ourselves more time as a species to deal with it, that would likely be a good thing. ... But in the absence of a coordinated global slowdown, we are left with the current situation, which is a powerful technology being developed at breakneck speed by a variety of actors and a variety of countries locked in a competition with one another where commercial and geopolitical rivalries are often drowning out the larger existential-to-the-species aspects of the technology being built. This isn't an ideal situation, but it's the one we find ourselves in."
</code></pre>
They know they are in a race that no one will win.<p>[0] <a href="https://www.youtube.com/watch?v=8zIcP5WlShw" rel="nofollow">https://www.youtube.com/watch?v=8zIcP5WlShw</a>
It's worth noting that Clark's career started in PR and journalism.
Thank you Mr. Altman for firing the starting gun when no one else wanted to race.<p>(The ambiguity of sarcasm is intentional here.)
"Oh what peril we are in where I must get rich by killing all of you" Is a statement that should make you disregard anyone saying it at any time. Either they are liars, or they are so morally bankrupt that they are willing to sacrifice the species for short term satisfaction. Either option makes them more fit for a mental hospital than a stage.
I find this line of reasoning highly dubious.<p>Yes, Anthropic is compute constrained, even after the SpaceX Colossus deal.<p>But supply constraints are the normal operating mode of any market. Anthropic could choose to serve whatever models it pleases at whatever price points it chooses and let the market decide where the value is.<p>If Mythos at <i>$X</i> overwhelms their capacity, they could just charge <i>$X+1</i>. If still overwhelmed, there are larger prices as well.
During periods of market exuberance, it’s in the vendors interest not to reveal where exactly x+1 is. At the moment, everyone just guesstimates the company’s TAM. Bringing certainty to that guesstimate cuts Anthropic off from the most exuberant market participants, bringing their post-IPO price down unnecessarily.
The question is, will anyone pay enough for Mythos to offset the opportunity cost of offering that much Opus? You don't want to end up in a spot where you don't have enough compute and your service's reliability degrades to an unusable state like xAI.
I feel like there's always a demand for the very best models, even at insane prices. If the opportunity cost is x times opus, maybe few but there will always be companies willing to pay x+1 times opus.
No insider info, but just wanted to mention that pricing signals things too. If Mythos is only servable at $X*Y dollars and isn’t Y times better than $X of compute at another provider, it’s quite possible that affects the IPO price negatively versus the halo of having the worlds most expensive model that is “too powerful to release” unpriced and unbenchmarked.<p>I think that most people at Anthropic are true believers from my interactions with them so I don’t believe this theory anecdotally. The simplest explanation is that it really is taking a while to gain confidence they won’t be used for a spree of bad cyber attacks. Knowing how long it takes institutions to fix security issues when filed by humans I would be more suprised if this wasn’t the case.<p>But I would forgive anyone who did think it was deliberately sandbagged; given the staggering sums at play, true believers might believe the ends justify the means to a little “marketing” like this.
Sort of, but valuation models depend on X being in a certain range. If it > this range, revenue and therefore valuation are impacted.
And then the bubble would collapse. Corps are already putting limits on token usage across the board because of costs. Increasing costs would significantly contract the hype bubble.
It is not "clear", as your comment suggests, it's hidden. Which is semantically the opposite of clear. Regarding your theory, might be true, might be false. But it's highly speculative.
All of us, including you, know that he is not saying "they are being transparent." When someone says "it's clear that..." in this way they're saying "It's clear to us <i>what is really happening here</i>.
It's not clear, there is no tangible proof that Mythos is not released because they don't have compute power to serve it. Saying that would imply that the "too dangerous" is a lie. Nobody has proof. It can feel "clear" for you, but it's not. Hence, I correct it.
Yes I got how they used the phrase. And it was wrong, so I wanted to react. Thanks for your addition, it dissipates any doubt on the intention of OP: he thinks Anthropic is hiding the lack of power by pretending it's too dangerous. But he is wrong to assume that without proof, hence my reaction.
Agreed, but I'm talking about how they are, very clearly, using the phrase.
The not clear comment is valid by either interpretation.<p>To a lot of us it’s not clear that’s what’s happening. It’s speculation and one possibility.<p>It may also be a secondary consideration and not the primary gating factor.<p>Anthropic has had their missteps but it’s still plausible to take what they say at face value.
I agree, saying "it's clear" when at best, "it's plausible" doesn't let the conversation happen.
And pretending to know what is going on behind the scene, anon on HN is not credible
I had to patch my Linux boxes daily at some point in the past couple months. I don’t want Mythos to be publicly released for as long as it is economically feasible for Anthropic. I hope they have a gentleman’s agreement with OpenAI and DeepMind about this, too.<p>Chinese labs will force their hands, until then let’s hope maximum number of projects get patched at a reasonable pace.
While I tend to be cynical with big tech, if this statement is indeed true we owe them some thanks for staving off a zero day tsunami.<p>> 50 initial partners ... found more than 10,000 high- or critical-severity security flaws.
They started Glasswing before they struck that $1.25B/month deal with xAI/SpaceX for their (notoriously dirty) Memphis data centers.<p>So they have a whole lot more compute now than they did last month.
Yes, 300 MW from SpaceX helps a lot, but I think that’s mainly to support Opus demand, which has grown faster than expected. If Mythos is roughly 5× more expensive to serve than Opus, as the pricing suggests, then 300 MW is nowhere near enough to enable large-scale deployment of Mythos.<p>As an ordinary developer who relies on a $20–$200/month subscription, I feel disappointed by the release of a paper describing a model that I can’t actually use.
But that compute might not be available to then long term. Hard to make big moves with a contract like that.
Why do you think that? All these rumors about compute constraint just seem like speculation and not based on any data or information. All they would need to do is increase their prices to free up compute capacity.
So why is OpenAI also releasing 5.5-Cyber in a private manner? Are they also out of compute?
Or they actually take the 'technology can kill' serious.
I bet Huawei and co would be happy to sell them some cheapo chips for inference!
The security concerns argument would have worked better if a forum full of people hadn't promptly obtained access by the extremely sophisticated tactic of guessing its URL...
it's also a marketing ploy.
Probably. This is an 8-12 trillion-parameter model, which is why it costs so much, that is also a major reason, besides RL and synthetic data, why it suddenly gained these new capabilities. They claim it was not fine-tuned or trained specifically for cybersecurity, but is instead a general purpose model.
Also, they just want to jack up the price by creating sensation.
[dead]
Not so sure I would want a company that does not see any issues with mass surveillance of my country [1] to have access to critical infrastructure or its source code where I live.<p>[1] <a href="https://www.anthropic.com/news/statement-department-of-war" rel="nofollow">https://www.anthropic.com/news/statement-department-of-war</a> :<p>> But using these systems for mass <i>domestic</i> surveillance is incompatible with democratic values.
In case the topic of memory safety is interesting to anyone I've been experimenting with using AI agents to port common web infra projects to safe/ performant Rust. Somewhat inspired by the Bun port - was thinking that at some point memory safety might be such a big deal that people just need drop in replacements.<p>- Valkey/ Redis port here <a href="https://github.com/ianm199/valdr" rel="nofollow">https://github.com/ianm199/valdr</a> (passes ~99% of single node test suite, real prod features like replication/ clustering/ HA early or not implemented)
- Further along port of Lua 5.1-5.5 <a href="https://github.com/ianm199/lua-rs-port/tree/main" rel="nofollow">https://github.com/ianm199/lua-rs-port/tree/main</a>
- I have a less developed nginx version that would be the north star
- These projects are very alpha at the moment<p>If anyone is interested in getting involved in this or has done similar experiments I'd love to collaborate! There is so much variation in how you can run these large scale agent fleets I don't think anyone has a perfect system yet.
Respectfully, as an OSS maintainer (not to the scale of nginx or valkey, of course)... if a third-party used an AI agent to rewrite my software in a different language, that gives me absolutely no reason to support that new project.<p>It is in all respects foreign code in a language I may or may not be familiar with, and worse yet, if I were to take over, I'd be responsible for maintaining the whole black box forever more?<p>Thank you but no thanks.
I don’t think anyone expects you to TBH. If you show interest, great. If not, the robot will translate your work into a different form of expression anyway. If you’re releasing open source software under BSD-like licenses, it’s still better than some company taking your work and selling it with zero value contributed back.
seems like it could be a decent opportunity for a bad actor to slip in something nefarious as well. We all know that nobody is reviewing a >>500k loc diff. For something like the Bun rewrite, where plausibly the person driving the agent(s) didn't want to sneak in something nefarious things <i>might</i> be ok. That seems significantly less true when you cannot trust the person driving the agent(s)/producing the >>500k loc diff.
Yes I hope this can be separated from people who are inundating OSS maintainers with slop PRs - these are fully separate projects with zero expectation of involvement from maintainers. Valkey itself is forked off the original Redis.<p>There might be a world where people soon just find unsafe C code exposed to the web (i.e. nginx) an untenable situation and I hope it can be a helpful resource.<p>Anyway, I see open source code as positive sum. Maybe in the end only a small community who cares about cross compilation finds this helpful and thats a win!
Why would you have to take it over? Wouldn’t it just be a fork/different project entirely.
I find this kind of rewrite both disrespectful and completely useless. Useless because the difficulty isn't getting to a working state but maintaining it. You now have to build a community around it to make any of this worthwhile. What would this software be worth if security issues weren't patched and bugs weren't fixed? You can't do this alone.
And I find it disrespectful because people have spent decades building this, and you're taking all that collectively built knowledge to create something that will compete with the project itself.<p>I hope people will restrain themself from doing this at least in the name of good ethic. I fear this is going to hurt OSS a lot.<p>I hope people will hold back from this, if only out of respect for the work that came before. I fear it could do real damage to OSS. It would discourage the maintainers whose effort makes any of it possible.
Hmm I view open source as purely positive sum. Valkey was forked from Redis in the first place.<p>But this is more about memory safety - you can have immense respect for the giants who built these tools but also be worried that memory safety might become an even bigger deal. If someone found a memory zero day in nginx or openSSL for example that is a very big deal!<p>I think this is one strategy we should look into, hopefully people in the C community look into other options like project Glasswing/ next generation fuzzers etc. When the world of security is changing so fast it is good to get a lot of shots on net.
Are you preserving the original software licenses, or AI-laundering the code in the manner[1] of <a href="https://malus.sh" rel="nofollow">https://malus.sh</a><p>1. AI-rewrites are <i>not</i> clean room implementations.
If the source language is C++, another option might be to use AI agents to port to a memory-safe subset of C++ [1]. For the most part, this involves surgical changes and glorified find-and-replace operations. And I'm guessing way fewer tokens :)<p>If the source language is legacy C, then another option might be (deterministic) transpilation to a memory-safe subset of C++ [2]. The resulting code wouldn't necessarily be performance-optimal, but it can be used for the majority of code that isn't really performance-sensitive.<p>[1] <a href="https://github.com/duneroadrunner/scpp_code_migration" rel="nofollow">https://github.com/duneroadrunner/scpp_code_migration</a>
[2] <a href="https://github.com/duneroadrunner/SaferCPlusPlus-AutoTranslation2" rel="nofollow">https://github.com/duneroadrunner/SaferCPlusPlus-AutoTransla...</a>
I love Rust, but porting others software to Rust (or any language) is a mixed bag. I'm a strong believer that good software requires deep domain knowledge to build and maintain. Porting code you don't understand by hand already risks still not understanding it afterwards, doing it in an automated fashion all but guarantees it.<p>All that to say I think these automated ports are interesting experiments. However if you want to build something people can trust, the people need to be able to trust that you fully understand what is built, and why it's built the way it is.
[dead]
If someone is porting such disparate projects as Valkey and Lua it is just for show and will be pre-alpha forever.<p>No one wants Bun in Rust, no one wants the rsync vibe code additions. This is just the only pro-AI comment, so the AI people voted it to the top.
Hmm my reasoning was that in order to have Nginx work in Rust you want to expose scripting so having a decent Lua in Rust is key to not call out to C for that. And then Valkey/ Redis is a lot simpler than nginx so it was a good way to learn how some of this works.<p>And I'd disagree on no one wants - Lua is quite helpful since it is easily used in WASM. There has been some interest from people in the Bevy community - a game engine in Rust - since you can't have Lua scripting in browser games easily with the C version.<p>But anyway if people want it or not memory safety might become much more important so I think it is a good area to explore. Some people think large C codebases are inherently unsecurable <a href="https://alexgaynor.net/2020/may/27/science-on-memory-unsafety-and-security/" rel="nofollow">https://alexgaynor.net/2020/may/27/science-on-memory-unsafet...</a>
I don’t care if bun is written in zig, rust, go, f# or sql. If it works, it works.<p>I also don’t care if it’s written by humans or LLMs or robot overlords from Alpha Centauri. Again, if it works, it works.<p>The operative word here is ‘works’. Code is now cheap, QA still isn’t. Since people don’t really like doing the same thing twice, specs for working code have never been written. Nowadays there is no reason to not create a spec detailed enough for robots to make no mistakes (pun intended) when filling in the gaps when converting from spec space to code space. As long as this remains true, I don’t care who or what does the boring parts.
Who is going to maintain all these forks? The person forking it has no community and can't realistically be an expert in all of these domains.<p>So no, it doesn't "work", it just worked at some point in the past.
> Who is going to maintain all these forks?<p>"Claude" would probably be the response of a typical tokenmaxxer. I have no desire to use software that was drive-by forked by someone who doesn't understand the trade-offs made by a project, or the values underpinning them. I'll AI-assisted domain-expert, or experienced maintainer who stumbled into the role over someone with no grounding in the domain being the human in the loop for AI agents.
Here's my big fear: Even IF (and that's a BIG if) we get all critical vulnerabilities fixed in tech (before adversarial/state-actors turn up with open attack models) - we still have (in at least a year) models that will be so good in social engineering that they can still (given enough tokens) gain access to whatever system they want.<p>If society can't trust banks and other institutions to safely control their data, what follows ?<p>Do we we collectivelly switch off the internet?
Social engineering as a problem goes away when anybody can get a model to do it for them for $5. It stops being possible, it's really the bank's problem when they can't have a minimum wage call center or a robot responsible for people's data.
A lot of social engineering attacks die the second you have domain bound 2FA. Not everything, but a lot.<p>But the idea that we'll squash all of the critical vulns is simply nonsense, despite the weird Firefox blog posts that indicate otherwise.
If things really get that bad then everything will require FIDO keys or push authorization using a phone app and possibly a initial registration code sent to a physical address. This is how Epic MyChart works.
The government should be in charge of ID Provider infrastructure and has local offices (postal) that can establish physical identity (and already do for people who need to travel abroad), but the religiously affiliated NWO conspiracy theorists have made this politically infeasible in the US, so we have unsavory private sector providers like World ID stepping in.
Is this just one giant marketing plot?
There's a lot of speculation that it is indeed a marketing plot and the model is just a step improvement over current capabilities... and the real reason they aren't releasing the model is they are compute constrained and cannot serve the model. To my knowledge there's no proof of this however, but given the fact that literally 60 days ago they made Mythos out to be the end of the world and last Friday they announced that they will release the model in a few weeks, I feel like it was indeed something along those lines (marketing ploy).
Their IPO is coming up soon. It would be interesting if Mythos remained mythical right up until then, wouldn't it?
Or just control of supply and demand. If they can charge twice as much serving half as many customers, that leaves a lot of potential future customers leftover.
The week before they released Mythos to governments they had all their source code stolen. It's all about improving their image and creating propoganda.
GPT-5.5-Cyber has already at least hit if not surpassed Mythos capability in cyber tasks. The only reason they're holding back is because once its out everyone would realize that its capabilities were a step change in March, but are not anymore, yet it costs significantly more and is much slower.
i think anthropic is being performative here, creating a hype for mythos and not releasing. i guess this is all a marketing thing to sell a security specialized AI to enterprise and startups at a way larger cost coz security market is deep in money.
They should share it with Meta.<p><a href="https://www.0xsid.com/blog/meta-account-takeover-fiasco" rel="nofollow">https://www.0xsid.com/blog/meta-account-takeover-fiasco</a>
So, they expand the program to US "ally" governments and corporations.<p>These entities will now give all their IP to an American company that only promises not to spy on Americans.<p>Subsequently, the NSA can audit the leaked sources manually and find real exploits.
Got to say, Anthropic have hell of a marketing team.
This is either a chuffed up PR move or an extremely generous alpha fold "publish all the proteins" moment
PR. their models dont do anything more than others. neither do their tools. they have very agrressive and misleading marketing.<p>work in cyber for 15+ years, worked at largest CS vendor globally and fortune5 companies. (top of the list).<p>only ppl using AI are shops with clueless ppl getting flooded in nonsense.<p>You will see the same sentiment in a different flavor (different products) in OSS security mailing lists now.<p>do not fall for it. for every one of these things. Test it, verify it, for yourself. dont take anyone's word. 100B+ valuation makes external voices generally worthless (easy to buy)<p>Im not saying its all worthless or will never amount to anything. But test yourself. please. a lot of money is getting chucked around.<p>Look at it this way.<p>They have a stake in having companies create not very good software.
They have a stake in supplying engineers to fix that.
They have a stake in tools to fix problems that it creates.<p>you can guess the next service offering...
This feels more and more like a marketing/scarcity play for the largest global corps.<p>Will likely give them time to expand capacity as well. And make them harder to dislodge in these orgs.
To me this makes little sense — I can’t imagine the orgs they have limited this rollout to don’t already have Claude subscriptions and integrations. And sure this may play nicely into branding a build a mystique around the model but ultimately they are missing out on a ton of revenue and risking being totally front-run now that model performance parameters are out and people have firsthand experience. Feels more like a fairly genuine attempt to be responsible. They could have easily rolled out an update and done some PR to absolve themselves of responsibility
Urgency x scarcity, unbeatable marketing move.
In the meantime, not everyone with actual access to the model are all that impressed.<p><a href="https://cyberplace.social/@GossiTheDog/116679693992983945" rel="nofollow">https://cyberplace.social/@GossiTheDog/116679693992983945</a>
Is there any evidence Mythos is qualitatively better than the Opus 4.x?<p>I'm afraid that the usual mantra that "we just need more scale" that worked well for attracting investments, is not working anymore - bigger models provide marginal improvements while naturally get much more expensive to run.<p>Is this why both Anthropic and OpenAI are rushing for IPOs this year?
It is quantitatively better at finding and exploiting vulnerabilities. Pretty wild that everyone here is just in denial about that, when folks who have used it say it's as good as the hype<p>Cf wrote a genuinely good piece and had found a bunch of bugs: <a href="https://blog.cloudflare.com/cyber-frontier-models/" rel="nofollow">https://blog.cloudflare.com/cyber-frontier-models/</a><p>Wolfssl is security focused and it found a novel exploit
<a href="https://www.wolfssl.com/how-claude-mythos-preview-helped-harden-wolfssl/" rel="nofollow">https://www.wolfssl.com/how-claude-mythos-preview-helped-har...</a><p>You can pretend that it's all smoke and mirrors, but that just doesn't match up with reality: <a href="https://www.paloaltonetworks.com/blog/2026/05/defenders-guide-frontier-ai-impact-cybersecurity-may-2026-update/" rel="nofollow">https://www.paloaltonetworks.com/blog/2026/05/defenders-guid...</a>
From what I've read so far it's less about Mythos being much better at tasks in isolation.<p>Security wise, it's about being able to find and chain multiple vulnerabilities to actually create viable exploits.<p>So I would imagine that if you were using it for regular software development you may not feel that it's that different unless used in a particular way?
> Im afraid that the usual mantra that "we just need more scale" that worked well for attracting investments, is not working anymore - bigger models provide marginal improvements while naturally get much more expensive to run.<p>It's super interesting to hear this refrain on HN, it is alarmingly common. Anthropic released benchmark numbers on Mythos, as they have for all of their models. Once models become public, people evaluate them in a myriad of ways. We have had reliable scaling laws for years and they still hold. Epoch capability index continues to grow exactly as expected. Where does this idea come from?<p>As for cost, the cost per token at a given level of performance drops up to <i>40x per year</i>.
It probably isn't, at least in terms of security or memory safety. The current models can already sniff out all memory vulnerabilities with relative ease, you can't really beat that.
Whats currently an open source project which comes closest to Mythos capabilities?
No single open weights model comes close to either Mythos or GPT 5.5.<p>Nonetheless, running many of the open weights models over a codebase, with an appropriate harness, can provide about the same vulnerability coverage (i.e. each of the open weights models would find a subset of what Mythos or GPT 5.5 could find, but the subsets are not the same).<p>Despite needing more runs and more time, this may be significantly cheaper, especially if the models are self hosted.<p>Based on what Anthropic said about Mythos, they also use a quite elaborate harness for finding bugs and vulnerabilities, i.e. not a simple prompt like "find the bugs".<p>They run repeatedly Mythos on each file of the codebase, many times. They start with more generic prompts, used to determine whether a more thorough analysis of that file is worthwhile. Then they use more specific prompts, to detect various classes of bugs. After it becomes probable that a certain bug exists, they do a final run where the prompt requests a confirmation of the already known bug, perhaps together with a proposed patch or a PoC exploit.<p>Therefore the efficiency of finding vulnerabilities depends a lot on the harness, not only on the LLM. Also, searching vulnerabilities in a big codebase when paying per token is very expensive, because it requires many runs of the LLM.
They keep writing like they stand to profit from this or something. Too many “coulds” in there for me too, this could be an amazing advancement and it could be nothing… normally we look at data and last headline I saw was 25 “high” vulnerabilities at the cost of $1 million in tokens.<p>No comparison to human teams, and I’m sure that $1 million in tokens was used by humans, in a team. So like most AI, they’ve developed a tool that capable people can use to be better, but unlike most tools, they’re claiming this to be outright magic. The magic is the hype train.
> The organizations in this new group are based in more than 15 countries<p>I mean most nasdaq tech companies would be in 13+ countries, why are they writing this like it's a big number, is hilariously small?
I assume they're using a more candid definition where they're not counting all the countries a company may be based, but rather the primary country they're based in.<p>I don't think they're trying to flex this as a large number. They don't want to give an exact number, as that may change etc / is fuzzy, but also want to give you an idea of the scale.<p>They say "In the future, we intend to expand our geographical reach much further". I imagine this commentary is somewhat related to the concerns that AI will create an even worse "global underclass". AI developments are first accessible to Americans, then allies, and then later the whole world.
They're writing it in contrast to the previous scope, which doesn't seem to have been available to any organizations based outside the US. (There was news a few weeks ago about how Japanese banks were <i>going to</i> gain access, but based on the timing I think this announcement is that access.)
How "altruistic" of them. If only Anthropic extended this level of care to the environment or the economy.
Why do you think the impact to the economy is bad? Also, if youre talking about the environment from the lens of data centers, I agree they CAN be incredibly problematic and that should be regulated and pushed back against when they engage in problematic behaviors (stressing water supply in a drought area e.g.). But not blindly -- data centers can be a clear win-win in a lot of ways, especially if done right. "data centers = bad" is way way way too simplistic a picture
“Mythos Preview continues a long-term trend that we’ve been warning about for some time: within 6 to 12 months […]”<p>The only trend Mythos continues is Anthropic’s trend of warning that disaster is always 6 to 12 months away.
Step 1: claim you created a tool so dangerous you can't release it<p>Step2: offer to test it, but only for the biggest companies in the world<p>Step 3: onboard those big players on your tooling and product<p>Step 4: profit<p>This is genius.
And all you have to do is demonstrate unique value during the pilot phase!<p>Err... wait... that was already the hard part... hmm
With trillion dollars at stake they can hire best of best in sales and marketing. And unlike some hardcore hackers who may have ethics that does not always move in direction of more money. Sales and marketing people are highly motivated for opportunities to make more money.
Our game is to craft shit, their game is to sell shit. You gotta respect the different tastes in the nature!
<stop hiring people><p>Don't you understand, if they really did do the <ai magic> they don't need to hire anyone, IT SELLS ITSELF
It’s true that providing security services to so many organizations will likely put them in a position to earn lots of money. It makes them an essential service, sort of like what happened with Cloudflare and denial-of-service attacks. (There are competitors, but they’re the first company people think of.)<p>But I think that downplays the importance of having a good product. If the product didn’t work, this would be a good way to lose trust with a lot of organizations in a hurry.
This is a circular economy that makes everyone look good. Almost all of these enterprise companies are sitting on top of so much of tech debt that in any realistic scenario they cant really patch vulnerabilities if they are even in double digits. A lot of these companies would not even let their valuable enough code to be ingested by LLM's.<p>At this phase no company would risk their brand by calling the product as ineffective. The big players are in it together and small ones have no option but to play along.<p>Nevertheless collecting the historical wisdom and running it at machine scale does have a lot of benefits for sure. The only question is the signal to noise ratio, machine is doing what humans did, just at a multiplier speed and with a lot more context than what a normal human can hold.
Yeah and apparently, Mythos is pretty effective at finding critical issues. So it seams to be a good product served with a genius offer. Anthropic founding engineers are already comfortable, they will end rich.<p>They did produce great value, claude code and opus 4.5 are a singularity in software engineering.<p>The job we practiced for decades simply doesn't exist anymore.
Yes, it flips it from “don’t use a remote LLM on our code because security” to “we must run an LLM on our code because security.”
These companies are surely already onboarded…? They claim like 10k verified and high severity CVEs. Would you have preferred they just rolled it out like another opus update? You wouldn’t be insinuating in that situation that they were careless and reckless? They risk missing a boatload of revenue if openAI front runs them for a public launch. In what world is this some sort of scam??
Where did I use the word scam?<p>Marketing move doesn't mean scam. It describe the ability to sell people over a narrative and surpassing your competitor in market share. And that's exactly what is happening.<p>My post is a "tribute" to the efficiency of Anthropic's communication.
I never complained about anything, nor calling it a scam, nor saying they should have released mythos to the public instead of rolling it out to a selected cohort.<p>You tried to expand my words to make me say something I didn't, because my post wasn't giving you a clear conclusion of my opinion regarding their private release.
Ok you’re totally right, I read this as a cynical “this is all marketing” post ==> a scammy connotation. Without that read, your points are fairly valid, but are you still implying this is all a pure marketing tactic? If so I would still argue against that as a necessity but surely marketing could be heavily involved. But still: this could easily be a footgun. OpenAI will easily release the same model and now that Anthropic has taken the initiative to do a slower more contained rollout they wouldn’t need to do any of that. So from a business perspective I would still argue this whole glasswing initiative would make their sales and marketing department pretty nervous. I mean in a second-order branding sense sure this plays into the “we are ethical” ethos but it hardly seems worth the risk
I don't have enough elements to conclude if the world would collapse if Mythos was released publicly without Glasswing.<p>Nor publicly or in my internal reasoning. I rarely conclude without proof or very intense and clear intuition.<p>From a strategic PoV it makes sense to check if their model is dangerous, I wouldn't want to have my brand name associated with "NK hacker team find zero day in all linux servers of the web and ..."
Seems like they're not even close to step 4.
And put Chris Olah, Anthropic co-founder, sitting next to Pope Leo XIV presenting his first encyclical, Magnifica Humanitas, at the Vatican.
>can't release it<p>can't release it the plebs
I don't get how this is event front page of HN.
That’s fine as long as I can identify and reject any Mythos derived patch as being irreproducible.
It would have been nice to have a list of the 150, but I guess it would make them a hacking target?
I still find it funny that GPT-5.5 is just as good as Mythos and yet Anthropic likes to make things worse than they actually are.
[dead]
[flagged]
Anthropic has the marketing of a weight loss product.<p>- They still claim 10000 issues, but they found only one in curl.<p>- They did not find rsync issues but Claude rather <i>introduced</i> rsync issues.<p>- Facebook is a member of this cult program but Mythos did not find the account takeover flaw.<p>- Mythos did not find the issues in <i>Anthropic's own Bun rewrite</i>.<p>They will not release Mythos because it would be exposed as a fraud before the IPO.
To be fair the curl author is excellent at what he does.
It's just pure marketing, and most people are falling for it. The primary issue stems from their definition of "vulnerability". Most C code will be _swimming_ in vulnerabilities depending on how you analyze it (ie function that accepts a pointer but doesn't validate -> potential vulnerability right there). The only thing that matters is if it's de facto exploitable or not.
Expanding Project Glasswing (IPO)
Mythos gives BIG Tesla FSD energy, I’m over it
Maybe it is just me: I feel Anthropic most recent product announcements resemble more and more like what IBM tactic was at its high. For instance, the Watson AI hype after it defeated Kasparov. The difference is IBM actually wanted and let businesses buy and use Watson as opposed to time released like what Anthropic does to even boost the hype higher.