frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Ask HN: Which frontier model can do code security reviews

4•Bender•1h ago
I can't complain about Opus 5.5, more than extracted my money's worth out of it but the final stages require pen-testing and Claude's masters stomp on it every time it tries to help do security reviews [cyber]. Ever so often it sneaks in a security fix. Even found a race condition in haproxy by mistake and Claude took it upon itself to find the crash string. That went horribly bad. Each time they try to up-sell Mythos and say I have to go through a verification program that I am not permitted to go through.

Aside from the uncensored Qwen forks, which frontier models can do extensive code security reviews, security fixes? Ideally something close to the quality of the NCC Group. This is for my own hobby craft. Maybe this does not exist and that is fine too.

Comments

bigyabai•59m ago
GLM 5.3. Anthropic even made the mistake of comparing it to Mythos (lol): https://www.anthropic.com/research/glm-5-3-and-the-spread-of...

> Like Claude Mythos Preview, GLM-5.3 has strong capabilities for autonomously building end-to-end cyber exploits. But GLM-5.3 is unlike other frontier models in that it has been released without meaningful safeguards to limit misuse. We find that attackers can bypass GLM-5.3’s safeguards between 64% and 100% of the time with simple techniques in our simulated tests.

> We find that GLM-5.3 develops end-to-end exploits in 50 of 410 attempts. Claude Mythos Preview did so at a similar rate—in 56 of 410 attempts.

Bender•44m ago
I may end up going that direction. I would ideally like to find something that is purpose built to do code pen-testing so I do not have to bypass anything. There are forks of other models built for this, maybe there is a fork of GLM too.

Grok is telling me it can do code security reviews but I am not sure I believe it.

Tell HN: GitHub refuses to remove cracked copies of my software after a month

488•IvanK_net•1d ago•276 comments

Ask HN: Will mental health improve as AI brings mathematicians down to earth?

3•amichail•49m ago•0 comments

Ask HN: Which frontier model can do code security reviews

4•Bender•1h ago•2 comments

Ask HN: Is the xcancel source code publicly available?

3•bigwheels•1h ago•1 comments

Coding and Agentic Capabilities Are Now More Important Than Ever for AI

2•StizzurpXDD•2h ago•3 comments

Ask HN: Are there AI models for generating sounds based on a text and reference?

33•onemiketwelve•1d ago•15 comments

Ask HN: Is this the beginning of the end of open source?

3•potamic•4h ago•8 comments

Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7?

31•mariocesar•20h ago•28 comments

Ask HN: What Is Your Personal Backup Methods

11•Crontab•17h ago•6 comments

Tell HN: HN has lost the joy for me

15•trencedamp•11h ago•16 comments

Ask HN: What games do you religiously play on your phone browser?

13•saimiam•20h ago•27 comments

Google Chrome's AI API actively used for device fingerprinting and profiling

6•AlexanderHanff•9h ago•0 comments

Ask HN: What do you think about Fractional CFOs

6•mtmosestn•17h ago•10 comments

Ask HN: How do you describe what your relationship brings you?

6•maxignol•23h ago•8 comments

Ask HN: Do you still own a printer?

15•nunorbatista•1d ago•23 comments

Ask HN: How to deal with AI "true believer" leadership at work

5•microflash•1d ago•6 comments

Ask HN: My Apple ID is locked for a week, Apple is a single point of failure

15•akg_67•1d ago•5 comments

Ask HN: Why is Ask HN only showing me 14 posts?

45•Gooblebrai•21h ago•44 comments

Ask HN: What would you like to see in a new AI technology release?

2•ikishade•1d ago•3 comments

Ask HN: Vibecoding Follies

4•vegnus•1d ago•3 comments

Ask HN: How come everyone is an LLM expert?

4•delis-thumbs-7e•1d ago•3 comments

Ask HN: Show me your agentic SDE semantics

2•danielovichdk•1d ago•0 comments

Ask HN: Is observability broken for you?

4•tmach32•1d ago•0 comments

Ask HN: Agent access to chat data should require participant consent?

2•maxwellito•1d ago•1 comments

Orcah Studio: A local-first video agent that can search your videos

8•iliashad•1d ago•5 comments

Ask HN: Alternatives to NeurIPS, ICLR and ICML

3•john-titor•1d ago•0 comments

Ask HN: What brings you back to personal AI agents like Instinct and Muse?

3•sdrth•1d ago•1 comments

Ask HN: Why does Astra compact context so frequently vs. Fable?

3•yesitcan•1d ago•0 comments

Ask HN: What do you think about AI generated slides for conferences?

4•Hixon10•1d ago•3 comments

Ask HN: How are AI budgets changing in your company?

6•bobby-cb•1d ago•2 comments