2026-10-30 / Signal #7
An open model turned Firefox’s unshipped patches into $1,000 one-visit file thieves
“Firefox published the lock change. The model used the blueprint before the new lock arrived.”
The Story
Epoch AI says a widely available open-weight model, GLM 5.3, used the “patch gap” — the time between a security fix being visible in code and reaching users — to build webpages that, on visit, read a local file from Firefox and sent it out. It did this against all six Firefox releases in a five-week window, for about $1,000 each once the harness existed, and no API provider refused the runs. Mozilla has since shipped 159.0 to close an unpublished bug the model kept rediscovering. The new strange fact is not “AI finds bugs.” It’s that the patch itself became the cookbook, cheaply, in public.
Why It Matters
Builder future-shock. Software’s old gentleman’s agreement (publish the fix, users update later) dies when a $1,000 open model can read the fix as an exploit recipe. Keep it cultural/economic, not a how-to.
Evidence
Epoch AI report, Oct 29 (primary). GLM 5.3, six Firefox releases (Sep 17–Oct 26), ~$1,000/version after harness, no refusals; Mozilla patched an unpublished bug in Firefox 159.0 (Oct 27). Adjacent to — not the same as — SFL’s Oct 29 “Google Carbon only for defenders” and particle-accelerator zero-day items.
Sources
Daily scan: 2026-10-30