Something else happened, and that was *very* recently. Those reports grew in numbers.
if I see 1-2 valid reports in a major open source lib from an AI tool, I'm not impressed. If I had enough funding, I could find valid vulns in a variety of ways.
When the Mozilla/Antropic thing came out, that was what I was thinking. "Yeah, these are real bugs, but you know, if I had infinite funding like Antropic, and a team of top security people, you know how many bugs I could find in Firefox?"
hanno
npub1sy…83cq9
2026-03-27 08:59:00 UTC
in reply to nevent1q…fasx
Author Public Key
npub1syue7pmxnqdduqh2ydqwavs0vx056jnc5zxmlg6lxecrl9zdtxfq283cq9Seen on
wss://relay.momostr.pinkPublished at
2026-03-27 08:59:00 UTCEvent JSON
{
"id": "d021721d731a8b7bc22263742ccb5fc157b23d59c05150b93540971890551ac5",
"pubkey": "81399f0766981ade02ea2340eeb20f619f4d4a78a08dbfa35f36703f944d5992",
"created_at": 1774601940,
"kind": 1,
"tags": [
[
"e",
"47ff3aa393e9ef41297f8c3c2bc90c4426e860ee55fe4a44e28fb58bfe7ab218",
"",
"reply",
"81399f0766981ade02ea2340eeb20f619f4d4a78a08dbfa35f36703f944d5992"
],
[
"p",
"c6ded81787e5543f1b20f09d744b089443524d9e6fe4a95aaeb4c07b42e012cb"
],
[
"e",
"e6640d678f750364a13a787e37db80970f5d61496ac7f639a712c41390f8a79f",
"",
"root",
"81399f0766981ade02ea2340eeb20f619f4d4a78a08dbfa35f36703f944d5992"
],
[
"proxy",
"https://mastodon.social/@hanno/116300312780138111",
"web"
],
[
"p",
"81399f0766981ade02ea2340eeb20f619f4d4a78a08dbfa35f36703f944d5992"
],
[
"proxy",
"https://mastodon.social/users/hanno/statuses/116300312780138111",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mastodon.social/users/hanno/statuses/116300312780138111",
"pink.momostr"
],
[
"-"
]
],
"content": "Something else happened, and that was *very* recently. Those reports grew in numbers.\nif I see 1-2 valid reports in a major open source lib from an AI tool, I'm not impressed. If I had enough funding, I could find valid vulns in a variety of ways.\nWhen the Mozilla/Antropic thing came out, that was what I was thinking. \"Yeah, these are real bugs, but you know, if I had infinite funding like Antropic, and a team of top security people, you know how many bugs I could find in Firefox?\"",
"sig": "11c2c2e3b8f63acc57799987667f157a6ccc34864bc2778f5b3e73af7352a7130da7130912fd7a1459d26f16e08fc448b8c4f6b36c2e2cc68f9e32147fa4c8de"
}