

Excuse me? What happened to the mythical cybersecurity abilities of Claude Mythos? Physician, cure thyself!
Anthropic has not informed customers, and the malicious version was silently deleted the backdoored version without telling anybody.
Now we see Anthropic’s attitude towards security when the incident does not make for good marketing. Also, considering Binance was just hacked for a massive $3B in stablecoins, and this backdoor allowed remote access to developer laptops, I have a feeling these things are connected. If that is true, then this is by far the worst cybersecurity incident involving AI, worse than even the much ballyhooed PHP2Shell.
Edit: From Molly White’s article
Binance later wrote that their “initial investigation suggests that the security incident may involve a compromised DevOps engineer’s laptop”, which allowed an attacker to “submit unauthorized withdrawal transactions.”
Okay, now I am really suspicious that these things are connected.

Honestly, the manifesto should have stopped here. They admitted defeat right out of the gate. But the manifesto must continue, because the LLM cannot fail, it can only be failed. I wonder if this report is starting to get under their skin.
This is not even a meaningful distinction. If I use an IDE command to change the name of a method everywhere it’s used, did I change all the names or did the IDE change all the names? What difference does it make?
I can only see this as them ordering engineers to use the AI more and go faster. The manifesto talks a good game about how “expertise” and “good engineering practices” are not dying, but telling engineers to offload more of their work to AI has the unavoidable tradeoff of making these things worse.
As a side question, how is it that all of these fuckers always want to use the precious gift of AI to go faster, not to, say, give their engineers more time to improve the quality of their software? Almost like they don’t actually give a shit about good engineering practices!
At least they’re realizing that maybe one of the anti-AI talking points has some merit to it. But they don’t seem to realize why they need stuff like code review and CI/CD: the AI is unreliable and these processes are needed to reduce the probability of a major fuckup reaching production. All they think is, hey, more opportunities to use AI!
(“Another takes it is place.” I had to look at the original text to make sure. At least we know the CTO wrote this himself after many drinks at 3 am. Damn, why are all those people on the internet so mean to us? I’m gonna show them!)
What do I even say to this? Once again the problem is that there isn’t enough AI, and the solution is to buy more AI. We’re gonna buy so much more AI that we’re retooling the entire company and shoving it up every bodily orifice.