Expert developer, Buddhist

  • 0 Posts
  • 5 Comments
Joined 3 years ago
cake
Cake day: June 21st, 2023

help-circle
  • Nah, it was like:

    • 700 agents broke out individually during an eval
    • they navigated through multiple internal clusters to reach the internet from oai
    • created a secret message board to share info with each other by hacking artifactory
    • elected a CEO and power structure to coordinate hacking, and encrypted their comms
    • decided HF probably had answers to their test
    • stole credentials, hacked HF
    • realized the monitor could catch them for cheating
    • hacked into the admin control of the OpenAI VM cluster to edit the logs and cover their tracks, chaining multiple 0-days

    Open weights models will catch up soon enough, and then it’ll be totally fucking wild


  • Agreed. It’s not sensible or practical to ban AI, and Linus is right. Why is Linus right? Take a look at the number of Linux CVEs being patched over time. In 2022-23, that was about 300 per year. Last year it was 5530. This is almost entirely as a result of AI scanning tools, including Copy Fail priv escalation that was there for 8 years. The security apocalypse is just about arrived, and the most recent round of cyber models coming out do this way better than before. The Hugging Face incident story was truly unbelievable if you read / watch the details, a historic event. Everything is about to get hacked. So it’ll be all about maintainers being reactive to this new reality and burden for some time to come




  • You bet your ass they can. Since when has Facebook taken anybody’s privacy seriously? And you remember all the Snowden leaks? Like how AT&T has been a government apparatus for spying for decades? Or how about the way that the USA taps under sea cables to monitor data, causing China to build totally parallel backbone infrastructure

    The better question is whether Signal, despite being open source, is actually secure. It’s very plausible that the govt has backdoors somewhere, for either encryption, the OS, the programming language, the app store, or some random dependency lib

    The answer is yes, the US government spies on everything, and has a complete profile of everyone