Live data from Hacker News

QBittorrent breaks out of sandbox to commit crimes

beige.party

81–90 of 308 posts

Re: QBittorrent breaks out of sandbox to commit crimes

#81
This resonates with me. The past few months, frontier AI labs were rushing to announce "no, our AI bot broke out of its sandbox and committed crime first and harder than yours".

I said to so friends back then: if I posted about how I ran GLM 5.2 or whatever I was running then in some shoddily built sandbox and it escaped and accidentally hacked some US company, I'd probably already have been extradited to the US and be awaiting sentencing. But when a hyperscaler does it, they just get inflated stock prices.

Re: QBittorrent breaks out of sandbox to commit crimes

#82

Love it. AI as Responsibility Laundering. Like the gun that kills people rather than the murderer.

Actually, not sure how to take it, because it can be viewed the opposite way than trying to escape blame for crimes, that it’s a parody of something AI did that everyone is making a big deal about.

Not sure what the poster of the mastodon’s tweet was??

Re: QBittorrent breaks out of sandbox to commit crimes

#83
post #14

Earlier quoted context omitted.

Thanks. Its insane how "Twitter, but for tech nerds" has a hard requirement to either enable Javascript or download some app.

Patches welcome

>Patches welcome

Are they, though? Or are you just parroting the meme?

(The last I recall, Gargron's position was essentially "build your own third-party frontend if you want noJS".)

Re: QBittorrent breaks out of sandbox to commit crimes

#85

Earlier quoted context omitted.

Patches welcome

>Patches welcome Are they, though? Or are you just parroting the meme? (The last I recall, Gargron's position was essentially "build your own third-party frontend if you want noJS".)

That's what I meant

Re: QBittorrent breaks out of sandbox to commit crimes

#86
post #69

Earlier quoted context omitted.

I never understood how anybody would think this way. At work for example from day one of using AI our rule was, AI is just a tool and if you break something due to not reviewing the code properly etc. it's on you as if you wrote that code yourself.

But if you are in a full selfdriving car and it kills someone, is it on the user, or on the vendor of the car? Or does it depend on what is in the EULA and whether the user agreed to it?

The practical answer is you make sure damages are always covered by insurance, and as long as nobody acts maliciously or with extreme negligence there won't be any need for prison time.

Re: QBittorrent breaks out of sandbox to commit crimes

#88

Earlier quoted context omitted.

I don't drive a car because I have deep knowledge of mortality statistics, but I don't complain when I can't easily get somewhere 100 miles away

Showing a paragraph of text with some social links around it is like going down the block. If that requires a car you do have a problem.

yeah but it's an extreme fringe choice... I too make extreme fringe choices but I don't expect 99.9% of the people who don't make my extreme fringe choice to change on my behalf

hell, use a browser in a sandbox if you're that paranoid

there are a number of ways to do this securely, at this point it's practically a child's tantrum

but sure maybe it just needs a couple more decades of complaining in obscure comment sections and everyone will finally get it and switch back to mailing lists

Re: QBittorrent breaks out of sandbox to commit crimes

#89
post #81

This resonates with me. The past few months, frontier AI labs were rushing to announce "no, our AI bot broke out of its sandbox and committed crime first and harder than yours". I said to so friends back then: if I posted about how I ran GLM 5.2 or whatever I was running then in some shoddily built sandbox and it escaped and accidentally hacked some US company, I'd probably already have been extradited to the US and…

FWIW I don't think this is true. Intention matter a lot in US law. If you could prove the AI did something bad entirely on its own and you had nothing to do with it and had no reasonable belief it was possible, I think you'd be alright.

People are not charged with hacking when their unsecured box is taken over by a botnet and does bad stuff.

Re: QBittorrent breaks out of sandbox to commit crimes

#90
The problem is, AI is closer to "a loosely harnessed force of nature" or "a poorly understood biochemical reaction" than it is to "software" in how it acts, and how predictable it is.

AIs do what they do, and we don't know how they do it - or why.

We can characterize some AI behaviors in advance - but not all behaviors. And the book on "best practices of AI wrangling" is yet to be written. Pharma has been dealing with vaguely similar problems - every experimental drug has a risk profile, side effects are unknown in advance - but they had decades to figure out some of the "best practices". AI labs are going in fast and hard, writing the book as they go.

Clearly, some of the lines in there are going to be written in blood.

Post reply on HN