• Artwork@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    8 hours ago

    I am sorry, but I didn’t see any actual exploit evidence, but just the ad for “groundbreaking” Apple’s MIE and previous CVEs mentioned.

    Nor there is any use of LLM/“AI” explicitly stated, too, except the article itself it refers to, which looks like LLM-written: 8ksec.io/mie-deep-dive-enabling-apps [web-archived]

    • twinnie@feddit.uk
      link
      fedilink
      English
      arrow-up
      0
      ·
      8 hours ago

      They said details will be released once it’s been patched. If somebody has an Apple priv sec they’re not going to giving it away for free.

      • Artwork@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        edit-2
        8 hours ago

        Of course, but the possibly LLM-generated article has no actual preview of even undisclosed proof-of-concept (PoC).
        And the article is used as the main source at the Tom’s Hardware article, too.
        Therefore, the question is, what is the main point of the article, if?:

        1. LLM use is mentioned in the Tom’s - Antrophic;
        2. No LLM use is stated in the initial source;
        3. No PoC preview is stated at all;
    • saltesc@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      edit-2
      8 hours ago

      It’s Tom’s Hardware. You only share Tom’s Hardware articles when you need something to support your narrative but search results yield nothing.

      “No! That can’t be!.. Oh! Tom’s Hardware gets it!”

      Shame. It was actually pretty good until about a decade ago

  • Iconoclast@feddit.uk
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    9 hours ago

    But can this be? Lemmy assured me that this capability of Mythos was just a marketing tactic.

    • bluGill@fedia.io
      link
      fedilink
      arrow-up
      0
      ·
      8 hours ago

      That’s not true. What Lemmy is assuring you is that mythos is not significantly better than all the other llms that are out there. If you take a code base that hasn’t been examined by any LLM and run mythos on it, it probably will find a lot. However, if you’ve been using all the others and now start using mythos, you will find little more.

      • Iconoclast@feddit.uk
        link
        fedilink
        English
        arrow-up
        0
        ·
        7 hours ago

        So what about what I just said isn’t true? Aren’t you now just repeating that exact narrative, that the “too powerful to release” is just marketing speech?

        • General_Effort@lemmy.world
          link
          fedilink
          English
          arrow-up
          0
          ·
          4 hours ago

          I can see how the confusion arises. People here have been saying that LLMs are useless. Now you read about Mythos finding these exploits. But Mythos is not any better than the previous LLMs. Which means that it is useless. So any suggestion to the contrary can only be a marketing tactic. QED

          • Rioting Pacifist@lemmy.world
            link
            fedilink
            English
            arrow-up
            0
            ·
            3 hours ago

            LLMs aren’t useless just that their capabilities are vastly overstated.

            Finding patterns in code is what they are good at, what’s annoying with Mythos is they are scanning code that hasn’t really seen scrutiny and claiming it’s groundbreaking because it’s finding stuff.