The zero-days are numbered  | The Mozilla Blog
blog.mozilla.org
Since February, the Firefox team has been working around the clock using frontier AI models to find and fix latent security vulnerabilities in the browser.

Comments

  • Rimu@piefed.socialEnglish
    9·
    2 days ago

    I look forward to paying Claude to defend against the attackers using Claude /s

    • jimmy90@lemmy.worldEnglish
      11·
      2 days ago

      the crime against humanity that was C/C++ is being washed away by Rust

      worry not

    • ryannathans@aussie.zoneEnglish
      15·
      2 days ago

      If they didn’t work with mythos those 271 zero days would be impacting everyone for the indefinite future…

      • theunknownmuncher@lemmy.worldEnglish
        21·
        2 days ago

        Most of them were either:

        • firefox vulnerabilities that only apply with sandbox specifically disabled
        • not actually discovered by mythos and instead involved a researcher guiding mythos to the vulnerabilities, not the other way around
        • not actually discovered by mythos and instead the model used was opus, which undermines the MyThOs Is ToO dAnGeRoUs narrative

        Nearly all of the reporting on this subject is pure misinformation that contradicts the papers that were released.

        This is just a stunt to create an excuse for why Anthropic cannot give public access to their latest model without revealing the truth and actual reason: their business model is not viable and it would bankrupt them.

          • floquant@lemmy.dbzer0.comEnglish
            1·
            2 days ago

            Everyone has the assumption that they were high severity, but neither Mozilla nor Anthropic even claimed so

            • ryannathans@aussie.zoneEnglish
              31·
              2 days ago

              Nobody knew of publicly, that’s the whole point of a zero day

              These things get found and sold and used in secret for months or years before the public find and patch

              • baines@piefed.socialEnglish
                2·
                2 days ago

                you act like every exploit gives you a terminal

                and do you really believe that the blue team for these companies does not have a presence on these forums trading these exploits there’s a reason most the big shit is either social eng or an insider threat