HN

Comments (19)

• Menu

  usernomdeguerre
  Greatly appreciated the candor. I've included a few slides into text that i thought were eye-opening to me:From his Kernel Recipes 2026 slide on Mythos``` Mythos's 79 vulnerabilities: 24 - no detail at all "something crashed" 14 - not a bug at all 3 - totally made up data 15 - already fixed in latest release - 11 by others - 4 by anthropic 20 - fixes were needed - 7 "assume a malicious filesystem image" - 2 "assume you can inject a malicious network packet into the middle of the stack" - 2 "NOMMU" - 6 sctp networking issues for untrusted devices - 2 ipv6 minor network issues - 1 gpu driver for local malicious user ```GHK called this "10 'real' bugfixes", which to me sounds like there's a wild hype machine around these companies and uncritical parroting of every press release they make that falls apart when you engage the affected real experts.
• Aissen
  Nice to see Kernel Recipes covered again on HN. Shameless plug: I do the live blog: it's incomplete, imperfect and has typos; but it's written and published during the presentations. On this talk : https://kernel-recipes.org/en/2026/2026/09/22/live-blog-day-...
• devy
  At 3m19s Greg KH revealed what Mythos did in "revealing" 79 CVEs - pure pattern matching the previous decades of kernel developer's patches, and applying those mechanisms elsewhere to see if they have been universally patched. And Anthropic didn't cite Kernel Developers who original fixed/patched the CVEs like a decent human being would do. So yeah, Anthropic has the same problem OpenAI had for citing original work.
• Menu

  sriram_sun
  He also said that it all boiled down to just one hour of kernel development work.
• blinkingled
  It's great to hear about $topic from someone no-nonsense and in-the-know like Greg KH. You can verify all of this too - since, well Linux kernel. (As opposed to what Microsoft or Apple claims to fix as far as LLM finds.)Mythos may not be great today but it is not far fetched to imagine bug discovery, analysis and fixes can be made much quicker, accurate and even newly possible with specialized models trained on say Linux kernel specifics - with codemap/coding standards/threat models, good and bad coding patterns, tools to validate etc. an LLM can be much more relentless than humans and if it has the help to be accurate it will be worth the electricity burned. Oh and another model trained on triage data to validate the first one's findings would be good.(I think Microsoft is doing this internally - different models trained internally alongside Mythos - there was some talk about it on the tubes, don't recall where exactly.)
• 1sgT15
  Finally it is official. Mythos was overhyped and overrated.
• FLeXMurphy
  We've flagged this submission as off-topic. Please follow the submission guidelines. Topics around, for example, how Anthropic LLM escaped containment and will end the world are what hackers are curious about. The linux kernel on the other hand is not. Thanks.
• IndiaInfraNotes
  [dead]
• sippingabonedry
  [flagged]