undefined | Better HN

0 pointsshakna16d ago0 comments

Daniel found 30 CVEs in Curl, this year. I would not say that there is nothing to find, here. Just that it takes an actual expert.

0 comments

vidarh15d ago

I did not suggest there was nothing to find. But is also very different to count all CVE's found and reported (there are less than 30 total for 2025 and 2026 per [1]) by anyone and everyone vs. what was found in a short time by someone prompting a model.

[1] https://curl.se/docs/security.html

shaknaOP15d ago

Is not the selling of the model, that it is as capable as anyone and everyone?

> Claude Mythos is Anthropic's most specialized model, trained exclusively on security research, vulnerability disclosures, and attack pattern literature. Its reasoning reflects how the world's best security researchers think. [0]

[0] https://mythosvulnerabilityscanner.com/what-is-claude-mythos

vidarh15d ago

Even if I was selling the model, which I am not, it still does not follow that you can judge that on a single run, given that no security researchers have found all of these bugs on their own in a short amount of time either.

1 more reply

j / k navigate · click thread line to collapse

0 comments

vidarh15d ago

[1] https://curl.se/docs/security.html

shaknaOP15d ago

Is not the selling of the model, that it is as capable as anyone and everyone?

[0] https://mythosvulnerabilityscanner.com/what-is-claude-mythos

vidarh15d ago

1 more reply

j / k navigate · click thread line to collapse