@bcherny I have been having major quality issues lately. The models are acting like imbecilic amnesiacs. Moreover, I had one either straight up lie about building out a project that I spec’d out for it or it trashed its work after completion. But the git reflog says it’s lying
AI is not going to flood you with real vuln reports unless you have a ton of real vulns.
Adding resources to a vuln disclosure process to keep up with triage & bug fixing is a temporary investment at the loud end of the problem, not the right end.
@0xSero I’ll give Hermes a try. I feel like I’m fighting OC but may it’s the model. I have 16gb of vram, tried using qwen3-coder, Gemma4, and gpt-oss, and none of them seem to work. Qwen is just massive hallucinations. What do you recommend ?
Th vast majority of CISOs do not work at Google-sized companies, and will not have to worry about 0days
There’s a disconnect between the Mythos discourse, and what actually happens at most orgs:
Still can’t identify assets and IPs, biggest threat is still phishing, lack of defined ID mgmt and access controls, shadow IT, misconfig’d S3 buckets…
If you work at one of those companies (applies to most people) you have a LOT of work to do before AI 0days is even on the top 50 things to think about.
This is why advice from Google and large company leaders isn’t relevant to most folks out there. Massive scale and attack surface difference. Sure it’s still interesting and fun to speculate at that level, but it’s just not real for most people.
It's extraordinary how Israel can go on a murderous rampage and steal land from three different countries at the same time and our leaders will look you dead in the eye and say Iran is the rogue state in the region
I’m currently reverse engineering a binary with Claude to discover the source of a bug. It’s doing a great job discovering and disassembling. But it also just gave me a 5 point list of next steps and recommended starting with point 4 & 6. Truly the intelligence is artificial. #ai
I've taught European history for 30 years. Americans have always asked me how the Holocaust was possible, how Germans could have enabled a madman reveling in mass murder to carry out his plans. Now we can see in real time how this is enabled; now we have front-row seats.
My problem with the “he wouldn’t actually do it” and “institutional checks would step in to stop him” arguments regarding any of Trump’s unhinged threats is that we are in this position precisely because, at every prior stage, he did do it and nobody stepped in to stop him.
does iran have a right to defend itself? does palestine? does lebanon? or is it just israel and america who get to claim self defense as they engage in wars of conquest?
It’s kind of insane that we’re all lucky enough to live on this insignificant blue ball floating in an endless void that can somehow keep us alive indefinitely and yet a huge chunk of people want to ruin it forever in the name of an economic concept that we made up ourselves
@slowhandzen@0xSero Same. Last year I bought a 4080 super instead of spending a little more for the 4090. Now I’m kicking myself for not splurging a little more.
Lmao there are billionaires poisoning every facet of our society and making everyone miserable and starting insane wars and incinerating the biosphere and there are people trying to tell me I should be angry at Muslims.
You have to stop assuming he’s trying to do a good job. The current administration is not interested in governing. They are only worried about extracting as much wealth as possible and insulating themselves from the consequences
It fascinates me that giving to charities is considered noble and praiseworthy.
But creating a society that doesn't require charity is considered socialist and bad. 🤔