RE: https://cyberplace.social/@GossiTheDog/116390978622304265
Having worked extensively with world class security engineers, I had the hunch that the Anthropic Mythos scare is more marketing than anything else but seeing It confirmed here is good and deserves boosting. The main takeaway for software engineers with only a passing familiarity for security specifics is that "vulnerability" is a broad concept, forcing a crash *can* be security relevant in some contexts but most often isn't.
For #memorysafety, we consider it a big win if invalid memory access always led to a crash instead of UB. Crashes can be reliably detected and fixed, and not every threat model includes a DOS attack.