daniel:// stenberg://15h ago
The AI slop security reporting is basically extinct. It almost does not happen anymore. At all.
Show threadAnnika Backstrom
@bagder What do you think changed? Better tools? Stopping the bug bounty?
6:52amWeb
Show threaddaniel:// stenberg://14h ago
@annika the tooling for sure, nothing else
Show threadJose14h ago
@bagder @annika What was the total time between “this slop is a problem” and “this stuff is pretty good”?
Show threadgrayrattus14h ago

@j_s_j @bagder @annika month.

https://red.anthropic.com/2026/mythos-preview/

Here you can read more.

Claude Mythos Preview \ red.anthropic.com

Show threadNicolás Alvarez4h ago
@grayrattus @j_s_j @bagder @annika Mythos isn't even public yet so that can't be the reason.
Show threadJose4h ago
@nicolas17 Sure it could. curl ships with almost everything, so it’s not unreasonable to think one of the blessed entities with Mythos access scanned for vulnerabilities
Show threadNicolás Alvarez4h ago
@j_s_j And people without Mythos access stopped reporting bugs altogether?
Show threadJose4h ago
@nicolas17 My bad. You’re right
Show threadgrayrattus2h ago

@nicolas17 @j_s_j well I can imagine that expensive AI models really got better. This new one is just perfect example byt in general LLMs changed a lot at the end of previous year.

I have to use Claude at work and it really boosts productivity. It wont code whole project for you but if you know what you are doing these tools really speed up the work.

Show threadAedius Filmania ⚙️🎮🖊️14h ago

@bagder @annika

I assume that they also used your free work to create the prompt that refuse a lot of bad report internaly.