After 7 Months, Glasswing Overwelms Maintainers with Underwhelming Findings

Re:After 7 Months, Glasswing Overwelms Maintainers with Unde... by tialaramex on Tuesday November 10, 2026 @09:49PM (#50449228)

I obviously don't know if this applies for the Fil-C bugs but what we saw in Rust is that there's plenty of "technically that's not OK" which is very distant from "this will actually cause real world problems" https://forge-blog.github.io/posts/rust-std-memory-safety/

For example it's definitely not OK that you can impl Pattern in a way that causes non-UTF8 data in a string with safe code. But you probably didn't let random attackers impl Pattern, on a nightly Rust where that's even possible, and so that's not going to cause problems in our real world - even though it's wrong and must be fixed.

[ Parent | on HN ]

Re:After 7 Months, Glasswing Overwelms Maintainers with Unde... by pizlonator on Tuesday November 10, 2026 @10:15PM (#50449371)

Most of the bugs were things that fall into the “won’t cause real world problems” category.

But they were all things that unambiguously violated the Fil-C promise

[ Parent | on HN ]

Re:After 7 Months, Glasswing Overwelms Maintainers with Unde... by sheepscreek on Tuesday November 10, 2026 @11:19PM (#50449706)

I am speculating on a limb here: maybe the Mythos zero days developed into exploits had a few of the "usually won't cause real world problems" happenstances.

But a model with all the world's knowledge would know how to weave them together and successfully exploit.

I like to think that tomorrow's models are going to be more capable, what we are experiencing now is a fire drill to prepare for that.

[ Parent | on HN ]