The AI slop security reporting is basically extinct. It almost does not happen anymore. At all.
@bagder What do you think changed? Better tools? Stopping the bug bounty?
@annika the tooling for sure, nothing else
@bagder @annika What was the total time between “this slop is a problem” and “this stuff is pretty good”?
Claude Mythos Preview \ red.anthropic.com

@grayrattus @j_s_j @bagder @annika Mythos isn't even public yet so that can't be the reason.
@nicolas17 Sure it could. curl ships with almost everything, so it’s not unreasonable to think one of the blessed entities with Mythos access scanned for vulnerabilities
@j_s_j And people without Mythos access stopped reporting bugs altogether?
@nicolas17 My bad. You’re right

@nicolas17 @j_s_j well I can imagine that expensive AI models really got better. This new one is just perfect example byt in general LLMs changed a lot at the end of previous year.

I have to use Claude at work and it really boosts productivity. It wont code whole project for you but if you know what you are doing these tools really speed up the work.