2026-09-28 22:34 UTC
Replies (2)
-
@samvines@awful.systems 2026-09-29 07:41
The best (worst) part of all is that Jonny keeps going to meta and being like “hey this is bad” and theyre like “nah that’s intended behaviour” This morning he confirmed that it’s possible to get unlimited arbitrary and untraceable access to their LLM infra through these containers and that meta said that’s “intended behaviour” From jonny: So, summary: There is arbitrary inference that is root accessible, everything runs as root, agents can be spawned, exfil is trivial, and a malicious binary can come onto the user’s system through casual prompting, explicit code-sharing through the yet-to-be-released Spaces feature, walked through by a Workflow-Backed Idea, or inspired by a Generated Idea. The also yet-to-be-activated fleet learning system is a system for sharing Ideas in the background between muse instances. coming into focus?
-
@Soyweiser@awful.systems 2026-09-29 13:00
He was particularly impressed at how it helped him cancel forgotten subscriptions. Not the only person I saw talking about how great that is. Which is saying more about the ai enthousiasts than the llm tbh. Esp with the addition that the phonecalls are done by a real person.