cURL developer Daniel Stenberg, "Anthropic’s bug-hunting Mythos was greatest marketing stunt ever, says cURL creator."

[+TRS-80 MVC]

After all that hype, AI scanner found one low-severity cURL flaw

 

That scan, which analyzed curl’s git repository at a recent master-branch commit, was sent back to him earlier this month, _{and it found just five things that it claimed were “confirmed security vulnerabilities” in cURL.}, Stenberg wrote that the report “felt like nothing,” and that feeling was further validated by a review of Mythos’ findings. 

“Once my curl security team fellows and I had poked on this short list for a number of hours and dug into the details, we had trimmed the list down and were left with one confirmed vulnerability,” Stenberg said, bringing us back to the aforementioned number. 

As for the other four, three turned out to be false positives that pointed out cURL shortcomings already noted in API documentation, while the team deemed the fourth to be just a simple bug

https://www.theregister.com/security/2026/05/11/anthropics-bug-hunting-mythos-was-greatest-marketing-stunt-ever-says-curl-creator/5238111

 

 

[neufuse Veteran]

anytime you get claims like "it's so powerful we cant let the public have it" your BS meter goes off the charts, what's next "it's self aware"?