Okay. Let me interrupt here to insert a “Holy EFF” explicative. What Mythos autonomously did, without any explicit guidance beyond just being asked to, was to discover and invent an exploit which deeply manipulated FreeBSD’s Network File System server by using Return Oriented Programming. Since FreeBSD’s NSF server is already so secure, the AI pseudo-attacker was not able to insert its own code. So it caused the server to selectively re-execute its own code, code it already contained at the tail ends of a series of 20 different existing subroutines. This enabled it to manipulate the internal state of the NFS file server to grant root access to an unauthenticated remote attacker who was unknown to, and had no account on, the machine.
Let me be very clear: This capability is truly nothing short of terrifying. If Project Glasswing has the side-effect of launching Anthropic’s forthcoming IPO into the stratosphere then as far as I’m concerned they’ve earned and deserve it.
And this:
And this admits to the MUCH bigger problem. I suppose we should have seen this coming. But it’s here: We all know that only a small fraction of the world’s already deployed code can and will ever be made “Mythos safe”. It’s great that AWS, Apple, Broadcom, Cisco, CrowdStrike, Google, JPMorganChase, the Linux Foundation, Microsoft, NVIDIA, and Palo Alto Networks will all get to have access. And apparently some 40 others who are equally deserving, or who are presumably the owners of many of those thousands of other bugs that Mythos found. But what of everyone else?
We could truly be poised upon the precipice of some seriously rough times. As I said, I suppose we should have seen this coming. The biggest surprise is that everything about this brave new AI world is coming at us much faster than we expected, or even still now expect.
I've only touched on some of what he discussed in the podcast. For me, the biggest worry is all of the IOT and embedded devices that either can't or won't be upgraded and which may now be at risk because they contain embedded code libraries that are now insecure.
Interesting times indeed.




