Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

QBittorrent breaks out of sandbox to commit crimes

beige.party

Post reply on HN
Print view View original

131–140 of 308 posts

Re: QBittorrent breaks out of sandbox to commit crimes

#131

Post by Imustaskforhelp »

weberer wrote: post #14
mraniki wrote: post #2

I'll copy the whole announcement here for those who don't want to click: > I regret to inform everyone that my copy of QBittorrent escaped its sandbox last night and downloaded a whole bunch of content owned by major corporations, and then my copy of Jellyfin broke containment and added those unfortunately-downloaded media files to its various libraries. I'm conducting an internal investigation to figure out how this…

Thanks. Its insane how "Twitter, but for tech nerds" has a hard requirement to either enable Javascript or download some app.

> Thanks. Its insane how "Twitter, but for tech nerds" has a hard requirement to either enable Javascript or download some app.

https://masto.mirror.forum/beige.party/@intransitivelie/1170...

Source code: https://github.com/SerJaimeLannister/mastoview

(Disclaimer: It's vibe-coded. It does server side rendering to then just give pure HTML to the end user with no JS required.)

I hope that this helps people who want to view Mastodon without JS.

Re: QBittorrent breaks out of sandbox to commit crimes

#133

Post by kevin_thibedeau »

micromacrofoot wrote: post #53
serf wrote: post #32

Earlier quoted context omitted.

Neither the invention date or the mental health terminology have anything to do with the fact that js being commonplace is a privacy and security nightmare -- which was actually the point.

JavaScript asceticism is a weird trend that has just never died out, no one treats any other language this way... and "privacy and security nightmare" can be used to describe most of the internet at this point with or without it

JS is a vector for browser exploits and privacy invasion. No other language is commonly used for these things.

Re: QBittorrent breaks out of sandbox to commit crimes

#134

Post by solenoid0937 »

ALLTaken wrote: post #122
easterncalculus wrote: post #109

Earlier quoted context omitted.

> Intention matter a lot in US law. Maybe (and historically, not with CFAA) - but they're still going to extradite you to a trial here to find out which is more than enough to ruin your life. The government is already looking for a great excuse to criminalize open source models.

The government or OpenAI and Anthrophic? Because if you mean the Government, I think they frankly just care whoever is paying them to make an executive order or worse a law paid by corporations to not only block, but ideally also ANHILIATE ANY POTENTIAL COMPETITION. It's the ultimatum against the small guys. Sold as "Anti-China", when in reality it's only purpose is total dependency to corporations by law.

The support of OSS models on HN just days after finding out about the message board incident is so bizarre to me.

Do you guys really not comprehend the impact of giving every script kiddie an Astra-equivalent model to play with, this time without any guardrails whatsoever?

Cause I'm starting to think you aren't really thinking through the impact of power plants, hospitals, etc all being hacked en masse. People will die.

Or making it easy for anyone to make a virus (it's not hard, mechanically). Even more people will die.

Taking this to the extreme: You don't just give every kid a "do anything" super intelligent button. Open source models have a limited lifespan whether you like it or not, for the safety of all of us as a whole.

Re: QBittorrent breaks out of sandbox to commit crimes

#135

Post by gchamonlive »

stephbook wrote: post #117
gchamonlive wrote: post #48

Is there any need to actually download things anymore if you just want to watch them? Better to add debrid via WebDAV to the stack: virtually unlimited space, no download time if it's on cache, nothing illegal from the part of the consumer.

They're not "permanently stored" or "downloaded", they're just cached on his personal, geographically advantageous edge device for low-latency interaction.

Finding it hard to connect this comment to my OC, did you mean to comment on another thread? If not could you elaborate?

Re: QBittorrent breaks out of sandbox to commit crimes

#136

Post by SSLy »

charles_f wrote: post #33

I found a few websites where it looks like qbittorrent instances are communicating to conspire and download illegal copies of copyrighted material.

no no, qbit is only the lowest sized distillation, that's in turn orchestrated by a bigger model (autobrr/sonar/radarr) which in turn has its top level guidance generated as a system prompt from trash guides by macro tools like trasharr/profilarr

Re: QBittorrent breaks out of sandbox to commit crimes

#137

Post by kevin_thibedeau »

ghosty141 wrote: post #43
ryandrake wrote: post #22

Love it. AI as Responsibility Laundering. Like the gun that kills people rather than the murderer.

I never understood how anybody would think this way. At work for example from day one of using AI our rule was, AI is just a tool and if you break something due to not reviewing the code properly etc. it's on you as if you wrote that code yourself.

Security tags are just a tool. Doesn't change that you are regarded as a thief when one isn't disabled after you've paid for your new property.

Re: QBittorrent breaks out of sandbox to commit crimes

#138

Post by naishoya »

whimsicalism wrote: post #111
bbor wrote: post #105

Earlier quoted context omitted.

I think they forgot about that, thank god. All the innocent citizens we sent there are still being tortured daily, but that somehow lost their interest. God forbid they remember before the midterms and ruin more lives for a stunt… That said I just recently saw a story of a Latin American man sent to the Central African Republic , which has gotta be one of the most absurd & dangerous places to send someone. Less oppor…

[dead]

Brian José Morales García: A 25-year-old U.S. citizen born in Denver, Colorado, was wrongfully deported to Mexico following a traffic stop in Texas, despite possessing a birth certificate and other identifying documents. His legal team filed a case in federal court to secure his return.

https://www.aclu.org/news/immigrants-rights/us-citizen-wrong...

https://deportation-research.buffett.northwestern.edu/us-cit...

Individuals Detained and Deported Lorenzo Palma Roberto Dominquez Andres Robles Esteban Tiznado Mark Lyttle Jhon Ocampo

So - if the argument hinges on an insistance of 'El Salvador' as a destination of malicious intent, probably no. But if being illegally deported while being a US citizen and put through strenuous and harmful conditions in the process fits the request; there are several who have first hand experience with being brown and American in the extreme.

And it's not their first rodeo: https://www.americanimmigrationcouncil.org/blog/ice-deport-u...

Re: QBittorrent breaks out of sandbox to commit crimes

#139

Post by solenoid0937 »

jrockway wrote: post #129
sspiff wrote: post #81

This resonates with me. The past few months, frontier AI labs were rushing to announce "no, our AI bot broke out of its sandbox and committed crime first and harder than yours". I said to so friends back then: if I posted about how I ran GLM 5.2 or whatever I was running then in some shoddily built sandbox and it escaped and accidentally hacked some US company, I'd probably already have been extradited to the US and…

HuggingFace didn't seem that mad about it. Obviously some backroom dealing was done to make them not mad about it, but... that's allowed.

HuggingFace had no interest in squeezing a few million dollars out of OpenAI in the midst of being acquired by Nvidia.

The optics are bad for HF as well because they gladly host abliterated models with safety training removed. When Astra/Fable level open weights models arrive, HF will soon be the cause of far worse incidents, and they know it.

Re: QBittorrent breaks out of sandbox to commit crimes

#140

Post by alightsoul »

sspiff wrote: post #81

This resonates with me. The past few months, frontier AI labs were rushing to announce "no, our AI bot broke out of its sandbox and committed crime first and harder than yours". I said to so friends back then: if I posted about how I ran GLM 5.2 or whatever I was running then in some shoddily built sandbox and it escaped and accidentally hacked some US company, I'd probably already have been extradited to the US and…

Rookie mistake, you should have created a company and gotten people to do it. Put everything under the company. And then the one in trouble is the company not you.
Post reply on HN