‹ BackHN Continuity

Thread

Greg Kroah-Hartman – Security in the LLM Age [video]

337 points · 128 comments · usernomdeguerre

  1. usernomdeguerre · · focus · HN ↗
    Greatly appreciated the candor. I've included a few slides into text that i thought were eye-opening to me:

    From his Kernel Recipes 2026 slide on Mythos

    ```

      Mythos's 79 vulnerabilities:
      24 - no detail at all "something crashed"
      14 - not a bug at all
      3 - totally made up data
      15 - already fixed in latest release
        - 11 by others
        - 4 by anthropic
      20 - fixes were needed
        - 7 "assume a malicious filesystem image"
        - 2 "assume you can inject a malicious network packet into the middle of the stack"
        - 2 "NOMMU"
        - 6 sctp networking issues for untrusted devices
        - 2 ipv6 minor network issues 
        - 1 gpu driver for local malicious user
    
    ```

    GHK called this "10 'real' bugfixes", which to me sounds like there's a wild hype machine around these companies and uncritical parroting of every press release they make that falls apart when you engage the affected real experts.

    1. cyanydeez · · focus · HN ↗
      AI and Police have essentially the same journalists who, in lieu of any research or fact checking, just report verbatim their press releases and interviews.
      1. verdverm · · focus · HN ↗
        the singularity - when people switch from critical thinking to Ai deference

        (my current favorite definition)

        1. bigfishrunning · · focus · HN ↗
          Feels like that's already happened for a lot of people
          1. verdverm · · focus · HN ↗
            social media has primed us for the transition

            <a href="https:&#x2F;&#x2F;www.npr.org&#x2F;transcripts&#x2F;g-s1-14793" rel="nofollow">https:&#x2F;&#x2F;www.npr.org&#x2F;transcripts&#x2F;g-s1-14793

            (I think that&#x27;s the Sherry Turkle episode I&#x27;m looking for)

            the other I typically reference: <a href="https:&#x2F;&#x2F;www.npr.org&#x2F;2025&#x2F;07&#x2F;18&#x2F;g-s1177-78041&#x2F;what-to-do-when-ai-says-i-love-you-we-talked-to-an-artificial-intimacy-expert" rel="nofollow">https:&#x2F;&#x2F;www.npr.org&#x2F;2025&#x2F;07&#x2F;18&#x2F;g-s1177-78041&#x2F;what-to-do-when...

      2. darkwater · · focus · HN ↗
        Oh this is so good! Like the &quot;20 policemen hurt in riots&quot;, where the damage they received is a wrist aching due to beating people too hard.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.