Claude autonomously mapped attack surfaces of 25 OSS codebases, shrinking OpenSSH pre-auth surface
chrisrohlf · x · 2026-10-21
Anthropic's Chris Rohlf describes a research effort where Claude autonomously mapped and reduced the attack surface of 25 large, widely used OSS codebases — premised on the idea that shrinking the reachable attack surface of deployed services is more fundamental than fixing bugs one by one.
Results:
- Significant reduction in OpenSSH's pre-authentication attack surface (landed in OpenSSH 10.6)
- 500+ findings on reducing reachability and hardening configurations so security controls can't be silently disabled
- Methodology and a data preview are on the Anthropic blog
Trail of Bits' Tyler Nighswander added: you don't need to fix bugs or port to Rust — using models for secure design and threat-surface minimization is a great use case.
More from coding & agent
- Keep agent memory alive across crashes: persistent loop plus Firecracker microVM snapshots — vasuman · 2026-10-21
- Dev adds RTX mode to 2003 game Crimsonland: blood absorbs light, dries into matte crust — banteg · 2026-10-21
- Free tool turns screenshots into iPhone Duo foldable animations in 4K — yihui_indie · 2026-10-21
- Lithic MCP Server brings read-only banking and card API access to AI agents — modelcontextprotocol · 2026-10-21
- ClickUp MCP connector wraps ClickUp REST API v2 with BYO API key — modelcontextprotocol · 2026-10-21
- Developer claims $7M in sales by wiring X's API to Claude — EXM7777 · 2026-10-21