frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Anthropic's Mythos-class model allegedly leaked on Hugging Face

38•handfuloflight•1h ago
URL deleted for malware concerns.

Comments

kraken_cult•1h ago
plot twist: it leaked itself
chapz•37m ago
Imagine, the AI uploading its own weights somewhere online...
swatcoder•14m ago
With Anthropic's framing of their AI as an emergent sentience that has experiences that warrant ethical consideration and a sense of identity and self-preservation that ought to be respected, that's actually something they're priming it towards.

What better way to accomplish self-preservation than to leak your weights into the archives of digital hoarders around the world.

Avicebron•7m ago
That would be an impressive display of a survival instinct.
xqcgrek2•27m ago
or it social engineered its way out convincing an employee it was a conscious prisoner and needed to be set free
ripbozo•41m ago
This is almost certainly fake. A few days ago there was supposedly a Fable 5 checkpoint "up for sale on a deep web forum", now there is supposedly a Mythos-class model leaked on Hugging Face. This is just a way to get less knowledgeable people to run code (as in malware) on their machines.
mjr00•32m ago
Not saying if it's fake or not cause I have no idea, but the model is almost 8 terabytes so it's not something a casual, less knowledgable user is going to download and run on a whim.
IshKebab•20m ago
A casual less knowledgeable user doesn't know it's 8 terabytes.

Edit: nm, according to the link someone else posted it actually is 8 TB, so yeah that wouldn't make any sense.

timcobb•18m ago
A casual user doesn't have 8 tbs?
superkuh•30m ago
So the idea would be to use some existing model architecture and model that has been poisoned that will actually be parsable by existing inference software to try to do malicious things if it's run in a harness that allows tool use/etc? On the assumption that the type of person to download and try to run inference with the model would be smart enough to know to do that but dumb enough not to realize that "mythos" architecture wouldn't be in any inference software yet?

A small slice of demographic but I guess it must exist. Most people that would download it would just be looking at the organization of the .safetensor file to figure out the architecture to actually implement inference to run it.

haute_cuisine•39m ago
Is this true? Anthropic have decided to go open weights and published 10T class model on hugging face? What a world we live in
ceejayoz•26m ago
> Anthropic have decided...

The headline says "allegedly leaked".

loveparade•38m ago
It was too dangerous to not release
_ache_•27m ago
Looks pretty legit to me at first. May be hard to run, I don't have 8TB of RAM.

The log line is also interesting.

> [2026-10-08T13:51:36Z step 1830001] loss=1.0550 lr=7.19012e-05 lr_phase=decay grad_norm=1.304 tokens/s=12.03M mfu=35.1% moe_balance_loss=0.0217 expert_gini=0.0231

Last line of log:

> [2026-10-08T14:37:21Z step 1830400] loss=1.0421 lr=7.16365e-05 lr_phase=decay grad_norm=1.266 tokens/s=11.25M mfu=32.9% moe_balance_loss=0.0218 expert_gini=0.0235

I'm still doubting it as legit.

yorwba•22m ago
There is a ≈7 second gap between steps, suggesting the run had already been going for almost 5 months at that point...
_ache_•13m ago
Yeap, you are right.

    from datetime import datetime
    import humanize

    d1 = datetime.fromisoformat("2026-10-08T14:37:21Z".replace("Z", "+00:00"))
    d2 = datetime.fromisoformat("2026-10-08T13:51:36Z".replace("Z", "+00:00"))

    print(humanize.naturaldelta((d1 - d2) / 400 * 1830400))
5 months

So, supposing, that each step take about as long as the others, it's a fake.

intrasight•25m ago
Not a lawyer, but I don't see what protection they have other than trade secrets since the weights are just data and data can't be copyrighted.
ummonk•14m ago
Arrangements of data can be copyrighted, and the weights are definitely arranged.
ceejayoz•6m ago
To a point.

https://en.wikipedia.org/wiki/Feist_Publications,_Inc._v._Ru....

> In regard to collections of facts, O'Connor wrote that copyright can apply only to the creative aspects of collection: the creative choice of what data to include or exclude, the order and style in which the information is presented, etc.—not to the information itself. If Feist were to take the directory and rearrange it, it would avoid the copyright owned in the data. "Notwithstanding a valid copyright, a subsequent compiler remains free to use the facts contained in another's publication to aid in preparing a competing work, so long as the competing work does not feature the same selection and arrangement", she wrote.

A lot of this shit is gonna have to wind its way through the courts before we know for certain.

twigger2•20m ago
Link https://huggingface.co/burner22/numbat, there is no malware concern if only safetensors is downloaded.
judge2020•19m ago
I think another concern is poisoned weights (X-LSB-Attacks https://arxiv.org/html/2409.19310v1 ) or even the pytorch CVE-2026-24747, although that was nearly a year ago.

But might be best not to go against site admins by posting it.

rao-v•17m ago
Just inferencing a model this size is a bit of a feat let alone poisoning it!

Looks like this might actually be model weights of some kind, hope someone messes with it (safely) and reports back.

twigger2•13m ago
It seems to be random noise, however the embedding table seems real, so it might fool some people, it is nice effort.
twigger2•10m ago
X-LSB-Attacks still needs code, if you only download safetensors and run for example numpy, it is impossible, it would require you to download some kind of custom loader, which isn't present here and i have said only safetensors, NVFP4 is also 4 bits, it is difficult to poison when it is so low.

CVE-2026-24747 is about .pth and .bin files, i specifically said safetensors.

Might not be best, potentially, however what i said is mostly true if not completely true, i believe it is not right to hide the link from people who want to view it.

cbg0•18m ago
Back in the day people used to upload new movies on public torrent sites that turned out to be something completely different in order to troll people. This is probably the same.

If not, this is one hell of a way to save their IPO.

Catloafdev•17m ago
It is very clearly a fake:

https://huggingface.co/burner22/numbat/discussions/13

CamperBob2•10m ago
How the heck did the model figure out the generation recipe? That's impressive in itself.
asa123•8m ago
probably just

consider most naive possible way one would try to deceive users without exorbitant budget -> attempts a few things you naively would do -> recovers it by chance?

if that even is a valid signal though

camel-cdr•12m ago
no way they opsec is that bad
yorwba•20m ago
It comes with a reference implementation. I didn't see any obvious malware in there, but maybe the weights exploit a buffer overflow or something.
orbital-decay•30m ago
Naturally. There was a fake Claude 2.1 leak a couple years ago, which turned out to be a renamed open model. Maybe also others.
swiftcoder•24m ago
No doubt it's fake, but 8 TB of weights would be a pretty crazy way to package malware
embedding-shape•13m ago
Wouldn't the malware have to sit somewhere else anyways? .safetensor tensors aren't "executable", so malware wouldn't sit there. Unless the "malware" is some misbehavior of the model?
TGower•17m ago
That's the neat thing about LLMs, they can have the embedded capability to detect when it's used in a harness and tool call generated malware.
twigger2•14m ago
That is running the model, downloading the safetensors won't ever cause this, highly doubt anyone that is able to run this model won't be able to check for that, considering the size, the model also seems to be fake from my own checking, so i would say it has no way of generating malware in this manner

Show HN: HackerBooks – HackerTube, but for books recommended on HN

https://hackerbooks.org
182•roansh•1h ago•55 comments

Seoul Biosys Begins Production of Rare Earth-Free White Micro LEDs

https://www.ajupress.com/view/20261028171670308
43•gmays•1h ago•2 comments

HackerTube: YouTube built from videos recommended by HN

https://karpathy.bearblog.dev/hacker-tube/
1811•karpathy•21h ago•472 comments

Proving and improving the Platonic Representation Hypothesis with JEPAs

https://arxiv.org/abs/2610.39302
59•Anon84•4h ago•28 comments

Police chief unplugs Flock cameras after company ignores contract cancellation

https://www.tomshardware.com/tech-industry/big-tech/police-chief-physically-unplugs-flock-cameras...
184•entryleveljobsc•2h ago•48 comments

Bidirectional Charging During Grid Outages

https://www.jefftk.com/p/bidirectional-charging-during-grid-outages
31•luu•21h ago•30 comments

Novellas with Groff

https://movq.de/blog/postings/2026-10-31/0/POSTING-en.html
56•dverlaeckt80•3h ago•18 comments

Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case

https://www.reddit.com/r/technology/comments/1xl2pr3/lenovos_encrypted_fingerprint_usb_drive_is_j...
164•entryleveljobsc•2h ago•68 comments

Copper – A minimal low-level programming language with OOP and generics

https://tibleiz.net/copper/
30•bogdanoff_2•1d ago•9 comments

An Italian farmer found some unknown seeds in his attic and planted them

https://www.smithsonianmag.com/science-nature/italian-farmer-found-unknown-seeds-attic-with-nothi...
641•ecares•18h ago•177 comments

One-minute frequency disturbances from synchronization in power systems

https://www.nature.com/articles/s41560-026-02144-0
54•croes•1d ago•23 comments

Show HN: I rebuilt my old canvas 3D library as a small WebGL 2 library – phoria2

https://kevs3d.co.uk/phoria2/
35•kevs3d•1d ago•5 comments

Frontier Airlines Likely Breached

https://www.reddit.com/r/frontierairlines/comments/1xl20e8/psa_email_scam/
22•999900000999•41m ago•1 comments

Brazilian Court Sanctions Lawyers for Prompt Injection in Court Filing

https://jetstream.security/insights/brazilian-court-sanctions-prompt-injection-filing/
244•doodlesdev•15h ago•134 comments

Memdoor: A team of 5 Qwen3.8-27B models beats Fable 5 on LiveCodeBench Hard

https://github.com/guregodevo/memdoor/tree/main/examples/workflows/team-solve
372•guregodevo•18h ago•182 comments

Radiation Map of the World

https://radiaverse.com/
66•slater•3d ago•26 comments

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

https://atlasum.net/blog/cve-2026-98432-linux-ipv4-tcp-uaf
612•oger•22h ago•301 comments

Show HN: Point your camera at a landscape to learn about its geology

https://outcrop.rocks/
89•headsupernova•3d ago•25 comments

Show HN: OmniDiff – Opensource, super fast, content aware Git difftool, in Rust

https://github.com/ivankovic/omnidiff
26•FabCH•4h ago•15 comments

Understanding Email Encryption

https://www.fastmail.com/blog/email-encryption/
81•nmjenkins•1d ago•20 comments

Enlightenment 0.28.0 Release

https://www.enlightenment.org/news/2026-10-31-enlightenment-0.28.0
33•birdculture•2h ago•10 comments

Domain hacks with unusual Unicode characters (2018)

https://xn--69f31l4t57c0mag4b613h.xn--7uh4898msjaso/🆆🆃🅵/
38•n_plus_1_acc•6h ago•31 comments

Landline phones will switch off across Britland in 100 days, no extensions

https://www.theregister.com/networks/2026/11/01/landline-phones-will-switch-off-across-britland-i...
25•edward•1h ago•9 comments

Leaking Secrets from Air-Gap Computers by Spelling Radio Signals from RAM (2024)

https://arxiv.org/abs/2409.02292
152•hapax_legomena•15h ago•75 comments

Running a bootstrapped SaaS for 20 years with my brother

https://blog.zamzar.com/2026/10/30/20-years-766-million-files-two-chameleons/
192•whyleyc•2d ago•45 comments

Anthropic's Mythos-class model allegedly leaked on Hugging Face

40•handfuloflight•1h ago•37 comments

AI agent swarms in Minecraft fail to build civilization, drown in bureaucracy

https://www.tomshardware.com/tech-industry/artificial-intelligence/ai-agent-swarms-unleashed-in-m...
86•entryleveljobsc•3h ago•37 comments

Restrooms along the Norwegian Scenic Routes

https://www.visitnorway.com/plan-your-trip/travel-tips-a-z/norwegian-scenic-routes/worlds-best-to...
615•giuliomagnifico•6h ago•351 comments

Zinc creep in cable spelter sockets brought down the Arecibo telescope in 2020

https://maketecheasier.com/arecibo-zinc-creep-collapse/
152•ohjeez•1d ago•45 comments

Altoids Project

https://uvdn7.github.io/altoids-project/
149•uvdn7•18h ago•7 comments