which kernel devs? I only saw Jim Zemlin and other executives quoted.
I suspect they aren't releasing it due to inference costs. This is spin.
If this was true at face value, Claude code's own source would look _very_ different. I suspect the false positives are underreported. I bet they send a filtered set to cybergym. ARR is proof enough they cook metrics.
With the Firefox vulnerabilities, no false positive rate was given iirc. All 3 disclosures needed the sandbox disabled.
eclexic
npub1t9…pnd33
2026-04-08 05:53:04 UTC
in reply to nevent1q…mr9g
Author Public Key
npub1t9neskuk8y5z9k7zxpj8yr9dqds6drzy7jjwht2jyk2qqqpje3qq2pnd33Seen on
wss://relay.momostr.pinkPublished at
2026-04-08 05:53:04 UTCEvent JSON
{
"id": "90d1b96814744af3c90bb85a9029a462eb3ca7b22bd039664be51564f36cd7ae",
"pubkey": "5967985b96392822dbc23064720cad0361a68c44f4a4ebad522594000032cc40",
"created_at": 1775627584,
"kind": 1,
"tags": [
[
"e",
"250f62080d7c4b9d05a44b53b1376ac4356553982477a15f51d523130a29edbb",
"",
"reply",
"2aad90c13120482441b028cb1eefad12fafca60fa257c35fe7aedf5c94c6b90a"
],
[
"p",
"94107b805feed3e2aceb5eb16c17e5ce73b6c782da1bcb38b4a7171623585ae2"
],
[
"e",
"5514b48039201320606f0e46ee4bbc459e0c3b6caa09b3deca6be22a2e05fbc1",
"",
"root",
"2aad90c13120482441b028cb1eefad12fafca60fa257c35fe7aedf5c94c6b90a"
],
[
"p",
"2aad90c13120482441b028cb1eefad12fafca60fa257c35fe7aedf5c94c6b90a"
],
[
"proxy",
"https://mstdn.social/@theeclecticdyslexic/116367529359012429",
"web"
],
[
"proxy",
"https://mstdn.social/ap/users/115708188881910739/statuses/116367529359012429",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://mstdn.social/ap/users/115708188881910739/statuses/116367529359012429",
"pink.momostr"
],
[
"-"
]
],
"content": "which kernel devs? I only saw Jim Zemlin and other executives quoted.\n\nI suspect they aren't releasing it due to inference costs. This is spin.\n\nIf this was true at face value, Claude code's own source would look _very_ different. I suspect the false positives are underreported. I bet they send a filtered set to cybergym. ARR is proof enough they cook metrics.\n\nWith the Firefox vulnerabilities, no false positive rate was given iirc. All 3 disclosures needed the sandbox disabled.",
"sig": "c33de4f4e8a679b95498ba015d8722dedd798e7b3c4eeb3d4026aee652de67433a6d7669805099a88824015a1824b684236eefe2e0d0aaeec7199c257f232093"
}