Steve Gibson

speaker

30,295 appearances 25 recordings 1 series first heard May 2026 last heard 4d ago

Steve Gibson’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 25 in all, peaking in Sep 2026 with 8.

Appearances

newest first · ▶ plays the moment

Security Now (Audio) · SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked · 16 Sep 2026 podcast

So, you know, it's those, you know, pesky rate limiting humans again. voice-verified

You know, actually, people are saying that maybe a little human rate limiting would not be such a bad thing at this point in the development of all this, but we'll get to that later. voice-verified

Uh, you know. voice-verified

The humans, we humans created all these problems in the first place, and now we're standing in the way of getting them all fixed. voice-verified

So, okay, Patrick continues writing: five months into the project, again, 202 fixed findings in the ledger span 113 unique projects. voice-verified

resulting in an average of just one point seven nine fixed findings per project. voice-verified

He says the ledger has more withdrawn slash duplicate findings than fixed findings, as we saw. voice-verified

202 versus 247, I think it was, that had been withdrawn, or 245, which makes, he says, me question anthropics 91.4% true positive claim, right? voice-verified

It looks like voice-verified

It's like less than half are ended up being true positives. voice-verified

We don't quite understand what's behind the withdrawn, but it sounds like uh whoops, no, that wasn't actually a problem. voice-verified

He says, that made me, he writes, take a look back at a blog posting from our friend Daniel Stenberg, uh, which was that that was Daniel's post. voice-verified

that we covered at the time, Mythos finds a curl vulnerability. voice-verified

Uh he writes the results in in the ledger appear to align with Daniel's experience, where five findings reported by Mythos became one. voice-verified

This included three false positives, one bug that wasn't a vulnerability, and one confirmed vulnerability. voice-verified

He says, so here are a few considerations that maybe aren't so clear cut for Glasswing and Mythos, and that maintainers are in a position to answer when triaging vulnerability findings. voice-verified

Is the finding an actual vulnerability? voice-verified

Is the vulnerability real? voice-verified

Maybe it's just a bug? voice-verified

Is the component reachable? voice-verified

Showing 2801–2820 of 30,295 · page 141 of 1515