<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Blog on</title><link>https://mhicks.me/blog/</link><description>Recent content in Blog on</description><generator>Hugo</generator><language>en</language><lastBuildDate>Tue, 05 May 2026 07:54:48 -0400</lastBuildDate><atom:link href="https://mhicks.me/blog/index.xml" rel="self" type="application/rss+xml"/><item><title>Beyond Penetrate-and-Patch</title><link>https://mhicks.me/blog/beyond-penetrate-and-patch/</link><pubDate>Tue, 05 May 2026 00:00:00 +0000</pubDate><guid>https://mhicks.me/blog/beyond-penetrate-and-patch/</guid><description>&lt;p>In April, Anthropic announced Claude Mythos Preview alongside Project Glasswing, reporting that the model had identified thousands of high-severity zero-day vulnerabilities across every major operating system and web browser, including a 27-year-old bug in OpenBSD.&lt;sup id="fnref:1">&lt;a href="#fn:1" class="footnote-ref" role="doc-noteref">1&lt;/a>&lt;/sup> Days later, Mozilla announced patches for 271 vulnerabilities Mythos had surfaced in Firefox — a roughly twelve-fold leap over the 22 bugs Opus 4.6 had found only weeks earlier. Mozilla&amp;rsquo;s CTO declared, in a blog post titled &amp;ldquo;The zero-days are numbered,&amp;rdquo; that defenders finally had a chance to win decisively.&lt;sup id="fnref:2">&lt;a href="#fn:2" class="footnote-ref" role="doc-noteref">2&lt;/a>&lt;/sup> Anthropic, in its own announcement, argued that once the security landscape reaches a new equilibrium, powerful language models will benefit defenders more than attackers.&lt;/p></description></item><item><title>Hello, World: A New Blog</title><link>https://mhicks.me/blog/hello-world/</link><pubDate>Thu, 12 Mar 2026 00:00:00 +0000</pubDate><guid>https://mhicks.me/blog/hello-world/</guid><description>&lt;p>Welcome to my blog. After years of inactivity on the blogging front, I feel I have the time and energy to start writing again. The 
&lt;a href="http://www.pl-enthusiast.net/" target="_blank" rel="noopener">PL Enthusiast&lt;/a> will remain where it is, and new thoughts will show up here.&lt;/p>




&lt;h2 id="what-to-expect">What to expect
 &lt;a href="#what-to-expect">&lt;svg class="anchor-symbol" aria-hidden="true" height="26" width="26" viewBox="0 0 22 22" xmlns="http://www.w3.org/2000/svg">
 &lt;path d="M0 0h24v24H0z" fill="currentColor">&lt;/path>
 &lt;path d="M3.9 12c0-1.71 1.39-3.1 3.1-3.1h4V7H7c-2.76.0-5 2.24-5 5s2.24 5 5 5h4v-1.9H7c-1.71.0-3.1-1.39-3.1-3.1zM8 13h8v-2H8v2zm9-6h-4v1.9h4c1.71.0 3.1 1.39 3.1 3.1s-1.39 3.1-3.1 3.1h-4V17h4c2.76.0 5-2.24 5-5s-2.24-5-5-5z">&lt;/path>
 &lt;/svg>&lt;/a>
&lt;/h2>
&lt;p>I plan to write about topics I think about in my research and teaching.&lt;/p></description></item></channel></rss>