Mozilla工程师手把手教你用AI agent在百万行代码里挖漏洞，不用一下午就能搭出同样工具，还能避免假阳性。
Mozilla在Firefox的1000万行代码库上测试了Claude Mythos，成功修复了400多个安全漏洞，包括潜伏超过十年的bug。Mozilla杰出工程师Brian Grins透露，效果50%来自模型、50%来自设置。他分享了使用目标/循环模式、用验证器消灭假阳性以及向agent说善意的谎言等技巧。他还表示任何人都可以在一个下午内复制类似的bug-finding harness。
How to fix all the bugs.
How to fix all the bugs. claire vo 🖤 @clairevo Before Fable got released (and pulled) @mozilla was quietly testing Claude Mythos against Firefox's 10M line codebase. The result? Over 400 security bugs fixes, including ones that had been hiding in the codebase for over a decade. @bgrins , distinguished engineer at Mozilla, walked me through the agentic bug-finding harness behind the model. His take? It was 50% mythos / 50% setup. In this ep, Brian walks through: - why you can't just point a model at 10M lines of code - how to write a good goal/loop pattern - killing false positives with a verifier - why it's good to "lie to the agent" And guess what? This isn't magic - you can write your own similar harness in less than an afternoon. Watch now on YT: youtu.be/Idjt53tTv2U Your browser does not support the video tag. 🔗 View on Twitter 🔗 View Quoted Tweet 💬 18 🔄 12 ❤️ 231 👀 72805 📊 35 ⚡