10
Mythos finds a curl vulnerability (daniel.haxx.se)
submitted 6 months ago by to c/security@programming.dev
1 comment fedilink hide all child comments
 

My personal conclusion can however not end up with anything else than that the big hype around this model so far was primarily marketing. I see no evidence that this setup finds issues to any particular higher or more advanced degree than the other tools have done before Mythos. Maybe this model is a little bit better, but even if it is, it is not better to a degree that seems to make a significant dent in code analyzing.

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 6 months ago

... just don't read that part and miss the following:

Not using AI code analyzers in your project means that you leave adversaries and attackers time and opportunity to find and exploit the flaws you don’t find.

Daniel's saying that on a codebase already having been analyzed with good LLMs Mythos didn't additionally find much the others had missed.

  • permalink
  • fedilink
  • source
    •