The Anthropic bug reports were excellent, better even than our usual internal and external fuzzing bugs and those are already very good
sfink on Hacker News
80% right and 20% totally off base
In the thread “Hardening Firefox with Anthropic's Red Team”
Helped: Well-commented minimal test cases and useful bug descriptions.
Got in the way: Candidate patches were too narrow; writer wrote their own.
… Particularly in SpiderMonkey, we take any crash or assertion failure very seriously, and we're all pretty experienced in seeing how seemingly innocuous problems can be exploited in mind-numbingly complicated ways. The Anthropic bug reports were excellent, better even than our usual internal and external fuzzing bugs and those are already very good. I don't have a good sense for how much juice is left to squeeze -- any new fuzzer or static analysis starts out finding a pile of new bugs, but most tail off pretty quickly. …