Hacker News: jncratonhttps://news.ycombinator.com/user?id=jncratonHacker News RSShttps://hnrss.org/hnrss v2.1.1Wed, 15 Apr 2026 00:12:36 +0000<![CDATA[How dangerous is Mythos, Anthropic's new AI model?]]>Article URL: https://www.economist.com/business/2026/04/08/how-dangerous-is-mythos-anthropics-new-ai-model

Comments URL: https://news.ycombinator.com/item?id=47695154

Points: 3

# Comments: 0

]]>Wed, 08 Apr 2026 19:32:54 +0000https://www.economist.com/business/2026/04/08/how-dangerous-is-mythos-anthropics-new-ai-modeljncratonhttps://news.ycombinator.com/item?id=47695154https://news.ycombinator.com/item?id=47695154<![CDATA[New comment by jncraton in "Goodbye InnerHTML, Hello SetHTML: Stronger XSS Protection in Firefox 148"]]>You are right that the concept of "safe" is nebulous, but the goal here is specifically to be XSS-safe [1]. Elements or properties that could allow scripts to execute are removed. This functionality lives in the user agent and prevents adding unsafe elements to the DOM itself, so it should be easier to get correct than a string-to-string sanitizer. The logic of "is the element currently being added to the DOM a