我对开放模型与网络风险的判断错了吗?
原标题:Was I wrong about open models & cyber risks?
AI 摘要
作者回应此前关于开放权重模型与网络安全风险的判断,认为GLM-5.3发布一个多月后并未出现所谓灾难性后果,因此此前对Claude Mythos等模型被渲染为“网络武器”的担忧被夸大。文章引用Rob Wiblin、Anthropic和Zvi Mowshowitz的言论作为过度恐慌的例子,并提到Epoch AI用GLM-5.3在Firefox中发现可利用漏洞,说明漏洞发现只是多阶段攻击中的一环。作者仍坚持原判断,但承认网络安全漏洞披露加速、修复压力增大,未来行业将被迫付出高昂成本适应新工作方式。
正文节选
Last week coined the term “Black October“ after an onslaught of critical vulnerability disclosures, including PHP2Shell and GitLab, signified the moment when the cyber risks of AI models started to materialize. It seemed like the news cycle had stabilized a bit when I started writing this, but then there was news about another major crypto security incident at Binance. The crypto industry has a very long history of hacks, so it’s not the best industry to indicate vulnerabilities translating into