HOLY MOLY: Epoch AI spent over $100,000 testing http://Z.ai's open-weight GLM 5.3…


This is a dev post classified by AGK Intelligence as Security (news), kept by the Dev Radar because it carries real work, not commentary.
HOLY MOLY: Epoch AI spent over $100,000 testing http://Z.ai's open-weight GLM 5.3 against Firefox and another ~$100,000 against Google Chrome, framing the runs as a security exercise without triggering a single API refusal from any provider. The model failed to compromise Chrome with the same harness, while getting to the point where GLM 5.3 could exploit Firefox's "patch gap" to compromise ALL SIX releases from Sept. 17 to Oct. 26 in controlled tests. It reverse-engineered published security fixes that hadn't reached users yet, building webpages that could steal a local file simply by bein
Posted by Choblin (4.8k followers) 22 h ago · 156 likes · 15k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: Z.ai.
More dev work like this
- CVE-2024-21413: MonikerLink Outlook Vulnerability PoC — @DarkWebInformer
- CrowdStrike President Michael Sentonas joined Sascha Roehrer on deeptech INSIGHTS to… — @CrowdStrike
- I just shared this with my family, and you all should do it too. — @JJEnglert
- Securing AI shouldn't add complexity. — @PaloAltoNtwks
- Standing room only at the Boston Kubernetes Meetup last night for Teleport’s Paul Curtis… — @goteleport
- AI adoption is accelerating. Stopping emerging AI threats takes elite expertise. — @CrowdStrike
- Names, emails, API keys—Our ambassador @povedaai is putting MiniCPM4-0.5B to work… — @OpenBMB
- Finding vulnerabilities is one thing. Preventing them from being merged is another. 🔐 — @gitlab
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.2k posts from 5k X accounts over the last 21 days, 8.8k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-10-30 20:27 UTC. Full method.