upvote

points

by max_k3 hours ago |
comments
upvoteby bjoli3 hours ago|
next
[-]
My question is, did it provide POCs? I have had some security issues flagged that I tried my best to exploit, but failed miserably. Since I do not have any kind of privileged access the LLMs I use have been unwilling to actually prove that it can be exploited.

While I did fix most of the things because while they might not have been exploitable they were bugs waiting to happen, in all but one case I haven't been very impressed by any of the LARGE IMPORTANT SECURITY HOLES that were found.

reply
upvoteby max_k3 hours ago|
parent|
[-]
No, the Mythos reports do not come with POCs. It's a lot of redundant prose explaining the bug it found (much more than I'm willing to read), it explains how it can be triggered, but doesn't generate actual exploit code.

But that doesn't matter for me. It shows me real bugs and less than 1% false positives. Some bugs are truly nasty and urgent, most are trivial and not exploitable at all, but they're bugs and so I'm fixing them.

Mythos isn't mythically superb for being the best LLM model, but only for not having these annoying guard rails that make all others randomly refuse to cooperate when you need them the most. Whoever invented guard rails - please stop! - they just slow the good guys down in the race.

reply
upvoteby xpct54 minutes ago|
prev|
next
[-]
> Even if it's currently not good for my ego

If you don't mind answering, how come? Is it specifically that you dislike how abusable your code was, or something else?

reply
upvoteby Mashimo3 hours ago|
prev|
[-]
> I've been squashing bugs day and night

> This has been stressing me out

> the bugs follow me in my sleep

Sounds like you need some vacation.

reply