That was just 30 days ago. This has been happening for months. Part of the "Black October" narrative is just vulnerability research; Calif didn't abliterate 5.3 to find PHP2Shell.
That was just 30 days ago. This has been happening for months. Part of the "Black October" narrative is just vulnerability research; Calif didn't abliterate 5.3 to find PHP2Shell.
Yeah IIRC calif research on php2shell preceded all of that but I still stand by the thought that Anthropic has been the most accelerationist AI company despite its lip service to the notion of safety.
I don't have a take about Anthropic generally. The blog post was quite good. The blog post did not cause October's security debacles.
It was a good blog post yes, but I think you’re underplaying the bannister effect of Anthropic coming out and endorsing glm 5.3’s cyberattack prowess.
I think they definitely boosted usage. I certainly started using the -cyber models defensively against my own systems. But defenders like me are usually late to the party. I think the attackers have been here for a while but that the technology reached performance only recently.
The idea that attackers were waiting for Anthropic to tip them off on this is kind of risible. It's been a huge topic amongst practitioners for the better part of a year, and practitioners are usually a step or two behind dedicated criminal or state-sponsored attackers.
They are using mythos-5.5, which is still better than an abliterated GLM-5.3.
Right, that's kind of my point. Also: it's a good blog post (the Anthropic one), but it observes abliterated 5.3 models were already public. It's not like people who break into computers didn't know that already. They're not waiting for Anthropic to tell them about open weight models; they already live in the world of open weight models.