Ask HN: Find Vulns with Claude in OSS?

With the phpshell vuln coming about last week, can the average techie find zero-day vulns in open source software?

Does anyone do this?

Too much of that, especially with Opus 5.5 and expect to get the Anthropic Shock collar that will pause your session. You will be upsold Mythos which requires going through their verification program. [1] I can't make it more than 4 hours on Opus 5.5 without getting my session paused for the day and having to start a new one (strictly defensive coding). Apparently their leadership must believe that secure code is a value-add and not a mandatory part of software development.

They have recently enabled it on Opus 4.8 but it takes longer to trip. I get my sessions paused for [cyber] and [bio] all the time which is pushing me towards the Abliterated (uncensored) models Llama-3-70B-Abliterated or Hermes 3 70B, Dolphin, R1-Abliterated.

[1] - https://support.claude.com/en/articles/14604842-cyber-verifi...

Yes, if you know the right prompt to use.

https://x.com/HackingLZ/status/2113025408975143080

Reply on news.ycombinator.com