> and that Apple would not attribute to GLM
replyThat was a wtf to me, so I checked Apple’s latest iOS release security content and GLM & z.ai is mentioned once (under WebKit), Anthropic is mentioned twice, Codex is mentioned once. Not clear if there are other instances where the model did most of the work but wasn’t credited. I didn’t bother to check other releases.
> That was my thought too. For all of Anthropic's talk about their "adversaries"
replyIt’s very likely they found all of them, but that the same happened that happened to Microsoft a couple of decades ago: NSA orders not to disclose / fix them so that they can put it in their collection of unfixed zero days.
This is a coherent explanation for why federal model censorship has started with cyber capabilities. But this GLM model release is an in-your-face challenge to that policy. They now have to either set models free or impose a censorship regime that will put anyone not under it at an advantage. Or muddle along in the middle as usual.
reply> Or muddle along in the middle as usual.
replyI'm not a gambling person, but if I was this would be my bet.
Then "security through secrecy" is really bad mantra especially in the age of AI: others will find the same zero days very soon. If they attack you, then this loses the whole plot. If they propose a fix, then your arsenal becomes smaller.
replyWho says they missed them? Could also be sitting pretty in CIA’s long list of ready to go Vault7-like exploits.
replydeleted
replyProbably Anthropic found them too and promptly got a call from Isreal to stop looking.
reply