Live data from Hacker News

QBittorrent breaks out of sandbox to commit crimes

beige.party

241–250 of 308 posts

Re: QBittorrent breaks out of sandbox to commit crimes

#242

Earlier quoted context omitted.

Rookie mistake, you should have created a company and gotten people to do it. Put everything under the company. And then the one in trouble is the company not you.

That did not work well enough for Kim Dotcom.

That was practically a different era.

Re: QBittorrent breaks out of sandbox to commit crimes

#243

Earlier quoted context omitted.

You gave the tree the ability to fall when you decided to plant it. It wouldn't have that ability if you didn't. And we already know that trees can fall, don't we? That doesn't make you inherently responsible for the tree falling down in a freak storm 3 decades down the line.

Let me amend: We can't find someone to blame for forces of nature. This includes an earthquake, tsunami, etc. Insurance can help recover from these events, but nobody is "responsible" for the events happening. This may or may not include healthy trees falling. LLMs are not a force of nature, and we can and do expect them to have erroneous output. We can and do assign responsibility to the humans who use LLMs. Again,…

"Find someone to blame" is such a worthless thing. Whip the sea all day long - the waves don't care.

Modern AI has more in common with an ocean wave than it does with a hammer or a gun. It does its own things. It doesn't care. It will fuck up someone's day.

Best one can hope for is that the right lessons will be learned when that happens. Which, of course, hangs on there being anyone to learn them afterwards. Because the scope of "AI oopsies" will only ever increase.

Re: QBittorrent breaks out of sandbox to commit crimes

#244
post #81

This resonates with me. The past few months, frontier AI labs were rushing to announce "no, our AI bot broke out of its sandbox and committed crime first and harder than yours". I said to so friends back then: if I posted about how I ran GLM 5.2 or whatever I was running then in some shoddily built sandbox and it escaped and accidentally hacked some US company, I'd probably already have been extradited to the US and…

[dead]

Re: QBittorrent breaks out of sandbox to commit crimes

#245
post #240
post #125

Earlier quoted context omitted.

Maybe Aaron Swartz would still be alive if he was incorporated

just read about it, what a sad story, thanks for the reference. looks like he did great stuff. for context: https://en.wikipedia.org/wiki/Aaron_Swartz "As a programmer, Swartz helped develop the web feed format RSS; the technical architecture for Creative Commons, an organization dedicated to creating copyright licenses; and the Python website framework web.py. Swartz helped define the syntax of the lightweight marku…

> the most scary part is knowing this is the fear we all have, and the one they want us to have

Yes. It's such a terrible and oppressive feeling. I wish things were different...

Re: QBittorrent breaks out of sandbox to commit crimes

#246
post #191

Earlier quoted context omitted.

You absolutely can have (C) without widespread (A), you just need to limit the audience that gets the tools, and in fact the big labs are already engaging in (C) in collaboration with the government and vendors of critical software. That you don't have access to (C) to harden your blog is a non-issue from a societal perspective, hardening the software that our infrastructure relies on first is simply more important.

Limiting progress by letting only select corporations access the stuff is how you fall behind China, UAE and in a few years even Kazakhstan. Whoever wants to have access to (A) will have it, but letting only few select corporations provide (C) will mean majority will be priced out of (C). Are you a shill or something?

I very much doubt China is going to let their citizens freely use AI for hacking. In fact they keep a very tight leash on corporations and their employees.

Re: QBittorrent breaks out of sandbox to commit crimes

#247
post #185

Earlier quoted context omitted.

JS is a vector for browser exploits and privacy invasion. No other language is commonly used for these things.

Not even things like batch files and visual basic scripts on windows? Everyone seems to forget we had decades of dodgy scripts and activex controls in our browsers for years before javascript became the thing it is today.

They were never widely disseminated over a network. Office VBA exploits only lasted as a widespread threat until MS locked down macros by default. JS has been around much longer than that.

Re: QBittorrent breaks out of sandbox to commit crimes

#248

Earlier quoted context omitted.

> my chatbot illegally infiltrated servers without me intending it or taking any irresponsible actions that could reasonably be expected to cause it > taking any irresponsible actions that could reasonably be expected to cause it That latter part of the sentence is doing a lot of heavy lifting here

For certain specific cases, sure, but there is a general concern about an AI agent doing something illegal or harmful against the intentions of the human operator. And this analogy of a BitTorrent client being used intentionally by a human to download copyrighted content is just not applicable.

I disagree. Fifteen years ago, you absolutely could have written a web crawler that aggregated torrent links, and occasionally picked one and downloaded it. You could even build in an attempt to screen filenames to only download legal content. Your program very well could have downloaded illegal content regardless.

The bittorrent client being used intentionally illegally by a human is something you've invented, it's not something in the original post nor in the comment I replied to.

There's a solid argument to be made that using a powerful LLM in an internet-connected environment constitutes "taking irresponsible actions that could reasonably be expected to cause it". The fact that doing otherwise makes powerful LLMs much less useful is beside the point here.

Re: QBittorrent breaks out of sandbox to commit crimes

#249

Earlier quoted context omitted.

Brian José Morales García: A 25-year-old U.S. citizen born in Denver, Colorado, was wrongfully deported to Mexico following a traffic stop in Texas, despite possessing a birth certificate and other identifying documents. His legal team filed a case in federal court to secure his return. https://www.aclu.org/news/immigrants-rights/us-citizen-wrong... https://deportation-research.buffett.northwestern.edu/us-cit... Indi…

I was not making an argument, just asking for any factual basis to the parent comment. I guess that is deserving of 5 downvotes. > I think they forgot about that, thank god. All the innocent citizens we sent there are still being tortured daily, but that somehow lost their interest. God forbid they remember before the midterms and ruin more lives for a stunt… But thank you for providing other cases, I had heard of th…

The issue with the "i'm just asking questions" is that it is overused by disingenuous (i started writing nefarious but i think you can be nefarious but mean good, whereas people who do this _always_ mean to trick other humans) people. So nowadays, if you want to go ask a question to go further on a topic because you're interested in it, you need to add a preamble that explain. See:

"How did ancient egyptian managed to cut rock that cleanly without modern tools?"

vs

"I'm very interested in old tools and techniques, do any of you have resources about how Egyptian used to cut granite?"

Sadly, this is the state of the internet, because some people can't be genuine (probably think it's a weakness or something dumb), now everybody assume the worst of everybody else.

Re: QBittorrent breaks out of sandbox to commit crimes

#250
post #198

Earlier quoted context omitted.

Finding it hard to connect this comment to my OC, did you mean to comment on another thread? If not could you elaborate?

It’s a cynical joke, imagine a person having a personal computer, but in the responsibility-divesting way that corporations have “special purpose vehicle” debt-holding “technically a legally separate entity to us!” shell corporations.

Ah... That makes total sense, I'm feeling a bit silly now
Post reply on HN