is this still not clear?? i want to bring this up again optimistically, lets assume cyber is defense dominant and exploitable vulnerabilities are finite and exhaustible. then, give the fucking models to as many good security researchers as possible and let them exhaust the attack surface. pessimistically, i think cyber is offense dominant. the sin of complexity, vibe coding making it worse, and increasingly capable models potentially opening up entirely new vulnerability space, and you need to secure everything. then, your best bet is attack surface reduction, formal verification and secure by design, but thats a fever dream and aint happening anytime soon. so, again, give the fucking models to as many good security researchers as possible and let them find and eliminate as many attack paths as they can. either way, walled gardens are counter productive.

gotta give it to openai and their sane daybreak program heif heist by harsh kvmescape by paulos php2shell by lcfr gitlab rces by joaxcar chrome full chain by moyix wordpress rce by hashkitten all largely thanks to openai daybreak giving researchers access to gpt 5.6 sol. anthropic took the opposite approach, gatekeeping access, there is a lesson to be learned here