upvote

points

by jackb404012 hours ago |
comments
upvoteby Tiberium12 hours ago|
next
[-]
They actually did a detailed presentation at BlackHat about the HuggingFace incident, and events that led to it.

https://youtube.com/watch?v=87DyyMV0kCY

reply
upvoteby _puk12 hours ago|
parent|
[-]
That was fascinating.

Hijacking the package manager to pass messages between models and agents.. that's next level.

Like "pssst, if you need internet access there's a vulnerability in x service" kind of messages

reply
upvoteby ACCount3710 hours ago|
parent|
[-]
You've heard of 4chan for AIs, but did you hear of secret frontier lab AI hacker BBS?
reply
upvoteby ducktective12 hours ago|
prev|
[-]
> including isolated testing environments

Given the attack vector having possible super-human capability, I'm not sure such an environment exists. "Isolated" according to who?

Maybe seL4 could be a viable option here...

reply
upvoteby AlotOfReading11 hours ago|
parent|
[-]
Isolation is a pretty standard requirement for lots of networks, especially gov. AWS provides isolation domains, and used to have a unidirectional cross-domain service called AWS diode. Or you can just configure your gateways properly / buy data diodes. Lots of possible solutions.
reply
upvoteby jackb404010 hours ago|
parent|
next
[-]
They can't have it both ways. You don't get to tell the media your product is more dangerous than nuclear weapons for precisely this reason, and then do less to secure it than an off-the-shelf AWS product that predates LLMs.
reply
upvoteby ameliaquining9 hours ago|
parent|
[-]
Nobody is claiming that any currently-existing LLM is more dangerous than nuclear weapons.
reply
upvoteby jackb40408 hours ago|
parent|
[-]
https://www.cnbc.com/2018/03/13/elon-musk-at-sxsw-a-i-is-mor...
reply
upvoteby ameliaquining8 hours ago|
parent|
[-]
Leaving aside any questions of Musk's credibility, he was not referring to any existing LLM, as should be evident from the 2018 date in the URL.
reply
upvoteby jackb40407 hours ago|
parent|
[-]
You're claiming that Musk is less of an AI booster now than in 2018?
reply
upvoteby ameliaquining7 hours ago|
parent|
[-]
No, I'm saying that you're conflating current LLMs with future ones. The 2018 date was an indication that Musk wasn't referring to any specific already-existing LLM, since there were no LLMs in 2018.
reply
upvoteby orthogonal_cube9 hours ago|
parent|
prev|
[-]
There’s still levels to it.

“Isolation” can mean the network hardware has no direct connections to an extranet. Data is transferred manually by physical media (USB, DVD, etc.) with logging and dedicated transfer stations.

“Isolation” can mean a VLAN on equipment which has also has extranet access, creating a logical isolation rather than physical (to reduce cost). Data can be transferred manually or through diodes.

And then there’s “isolation” which is a joke: machines technically able to access the internet but require proxy configuration (which isn’t set but can be easily derived).

reply