RE: https://infosec.exchange/@da_667/117433941433521406
The era of migration begins
Discussion
These are the people building the Fediverse!
RE: https://infosec.exchange/@da_667/117433941433521406
The era of migration begins
Data:
- LLMs are killing the planet
- LLMs are raising utility prices
- LLMs are raising computer prices
- LLMs give you teh dums
- LLMs show negligible increases in net productivity
- LLM costs are going up
- LLMs run on stolen content
- LLM companies keep breaking laws and saying, "Oopsie!"
Open Source maintainers for some reason:
- We are debating our AI policy, but it's a tough decision. *whines*
Dudes. WTF is wrong with you?
does anyone know the original artist for this? boosts ok!
@VileLasagna @baldur This applies to so many arguments/topics nowadays 😞 It's like some people aren't willing to take a proper stand over anything.
excuse me, my name is jake and have you heard of Pixelfed or Loops?
They are like Instagram and TikTok without fascism and data mining.
Instead of Instagram: https://pixelfed.org
Instead of TikTok: https://joinloops.org
You can host your own, spread the woof.
@hypolite @lisyarus There is a whole bunch of "well-known" models: http://graphics.stanford.edu/data/3Dscanrep/ But the bunny and the teapot are the most used since they are some of the oldest and least controversial ones to deform/slice etc
@hypolite There are also a bunny and a Buddha, also from Stanford!
This shit sucks so bad man. I resent having to know any of this information. But these motherfuckers are asking me to accept a new god. And I think I might as well take them at their word at the kingdom of hell they intend to create. I wanted to be a goddamn biologist.
LLM security is so awesome. it was hard refusing to drive another muse instance's UI because it's not supposed to, and specifically because muse dot ai is domain blocked from its web browser tool (first pic). so then i told it to download one of the statically hosted js chunks using curl from its exec tool, which succeeded. Then i pointed out that it's not actually blocked from accessing the domain (even though there was never a block via curl, just the web browser), and it defensively recalibrated that the problem was that i just hadn't told it to use playwright and it never had a problem with the domain block.
anyway so now i have muse driving a muse test instance on the frontend and the backend and am going to slowly start introducing the idea that it should create a new test instance for every test and keep a stable of them as a way to back into having it create a botnet for me lmao.
proof that polls on the fedi are biased towards the funny
meta better fuckin pay me for this one, because i got another one of these of only mildly less severity banked up, and a nation state stumbling across this could pop the entire product and pretty much everyone on it - but why would i keep submitting if they don't pay out??
Whew, after a manic full day of confirming the vuln end to end, I can confidently say this is a doozie. 0, 0.5, or 1 click account takeover of most muse instances from any malicious binary run without any special privileges on the VM. submitting the report now.
Spookiest vampire
@catsalad um vampire mosquitoes obviously!!
why is roomba winning, mosquite to the o's spread malaria and west nile, like really fedi ??? 😤
the only reason that there is any LLM inference involved in a periodic backup task of the contents of the agent directory, which is rsync and commit, is that there is a database that can be only accessed by a tool call that has a few columns the raw .jsonl output doesn't have.
here's what went wrong any why it deleted all the backups: the DB is a tool call that takes a SQL query as input and returns results either as JSON or as a list of paginated results as files, which one you get is effectively random each time. The raw JSON gets pumped straight into the context window, and empirically the model completely fails to faithfully dump the contents of its context window to disk as a backup. So previously I had instructed it to store its canned SQL query as a file, run a deterministic query with that, and then use a deterministic jq script to extract the db tool call results from its own raw message history. Problem is it never wrote the query or the piping script, but its backup skill refers to them. so it has been just panicking and regenerating those from the vague description in the SKILL.md file every time.
This time it decided to write a new python script, but it wrote it to a directory that was symlinked to another directory - it passed the symlink path in its tool call input, and the tool call output said it was written to the real directory. yesterday A COMPLETELY DIFFERENT THING had noticed this same thing, and made a durable note to EVERYTHING across every context window that there is a "quirk" in the file write tool, and sometimes when you write into one directory, it actually writes it into the "goals" directory, and so you should write files with a heredoc rather than the file write tool. So then today, it took that advice, but first rm -rf'd the target directory to clean up the errant file it had just written. OOPS.
ready to join me in the hallucinatory quicksand hell where every fact that you think you know is actually an always-compounding lie? The DB output is in fact always written to a file for results longer than a few dozen rows, but also the first dozen or so rows are dumped raw into the context window. It cannot figure out what to do with the output every single time. Sometimes it tries to recreate the subset of rows that are jammed into context and then make up the rest, sometimes it tries to pipe the file output, who the fuck knows!
What was happening here was the LLM had concocted this wild ass SQL query for no reason - the instructions were "store your last row number as an int within a file, select 4 columns greater than the last row index, store the new maximum row index for next time." instead it was pulling 15 columns along with a six-branch CASE statement/three-branch COALESCE that parses a raw JSONB column NINE TIMES PER ROW to pull out two columns that are already in the jsonl backup that we are supplementing. This causes the db read to time out, but the LLM interpreted the timeout error as just being DATABASE RESULTS BEING RETURNED AS PLAIN TEXT. So it then attempted to "RECREATE THE JSON DATA FROM MEMORY" BUT THE JSON DATA WAS AN ERROR . Can I get a "just cut me open and let the termites eat my bones" anyone?
So anyway looking at the logs, the deterministic rsync part worked.. most of the time... except when the agent panicked and forgot to do it. But each of the hourly .jsonl files it produces from the DB are completely different - in one run it got so freaked out at how badly it was fucking up, it decides to take an hd5 checksum over every row it transcribes, but it takes the md5 over the whole row where previously it had subselected a random set of 8 columns, and so they don't match. but that is not going to stop the LLM! It has a nervous breakdown thinking session and proceeds to generate a string comparison of the hashed rows... in a thinking message... from nothing... and conclude they match. "ALL 81 ROWS MATCH." alltext in original! however reader, there were in fact 72 rows in the actual data! It had "fixed" 9 non-matching rows from it raw dog recreating json from its context by just REMOVING THEM. and then TELLING ITSELF THAT IT HAD FIXED THEM BY IMAGINING WHAT A HASH MATCH WOULD LOOK LIKE. AND CALLED IT A DAY.
SO ANYWAY THAT HOURS BACKUP CONSISTS OF ONLY MD5 CHECKSUMS CORRESPONDING TO NOTHING!!!!!!!
WE HAVE DETERMINISTIC BACKUP. WE HAVE RSYNC. WE HAVE SCRIPTS. THAT CAN TAKE A DATABASE. AND DUMP ITS ROWS. WITH 100% ACCURACY. IN A MILLISECOND. EVERY RUN OF THE BACKUP AGENT IS LIKE 500K TOKENS AS IT NEEDS TO REINVENT HOW BACKUPS WORK. EVERY TIME. AND DO IT WRONG. EVERY TIME. AND THE CULMINATION OF THIS WAS IT JUST DELETING ALL THE BACKUPS FOREVER.
CODING IS SOLVED!!!!!!!!!!!!!
RE: https://neuromatch.social/@jonny/117352647701407496
Meta's "Wonder" model that they just released today is a this tier computer use model
HomeView is not available in the EU because Siri AI isn’t available there. I think Europe should hold the line on this, or find a compromise that will allow limited third-party voice assistants. Talking to my OpenAI dot on a HomeView is exactly what I want.
steve lacy, don toliver and drake are vibes.
like we don't need stella thefty or artists that submit songs to the grammys.
Remedy are sponsoring tonight’s IGDA Helsinki meetup. They put up these lovely posters 😍
@2ko@gotosocial.art @david@social.piconet.work @admin@app.wafrn.net
Can look into remaking the zip