Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Anonymous GitHub account mass-dropping undisclosed 0-days

github.com

Post reply on HN
Print view View original

281–290 of 407 posts

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#281

Post by hananova »

DrewADesign wrote: post #242
Andrex wrote: post #236

Earlier quoted context omitted.

> I don’t give a flying fuck what people think. So all your writings are private, then? Do you have a motivation to communicate or publish? You're posting here on HN, so I think so. Why do you do think you do it?

Ok— I don’t give a flying fuck if people jump to the conclusion that I am an LLM. And that concludes my willingness to engage in those pedantic semantic antics.

They all say that, until someone that matters mistakes their writing for LLM slop and they lose something of value due to it.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#282

Post by DrewADesign »

gleenn wrote: post #251
DrewADesign wrote: post #176

Earlier quoted context omitted.

I don’t give a flying fuck what people think. Most colleges copied or adopted my (for a few semesters) school’s style guide, so LLMs are essentially copying me , and I won’t change my punctuation usage because they suck.

Sounds like a case of the Mondays, Mike Bolton

YYyeah… that’s definitely the correct reference, Bob.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#283

Post by fc417fc802 »

BlaDeKke wrote: post #265
fc417fc802 wrote: post #238

Earlier quoted context omitted.

I agree. They're voluntarily adding fingerprints to images so I expect the default voice is intentional and it wouldn't surprise me at all (though I have no evidence of this) if the output text has a fingerprint stenographically embedded in it.

In a video of Hank Green, he interviewed an AI expert (if there even is such a thing), and he said that in the thinking part of the conversation, LLMs seems to use code language to communicate with itself, like in the usage and ordering of words, and such. I think that there could be even more then a fingerprint in those messages. It’s this video: https://youtu.be/5CKuiuc5cJM?is=9VQ1FCxY_X3eNm-b Warning: They anthrop…

I'll take this opportunity to repeat that the natural language interpretation of thinking traces don't appear to be "real" by any reasonable definition. Even if they can at times be useful (at least seemingly). There's research demonstrating the usage of arbitrary symbols, even just repeating a single symbol, leading to a similar improvement in ability. This makes sense if you consider how the attention mechanism and KV cache work as the sequence iteratively grows.

Basically we optimize the models to produce output with certain characteristics but that doesn't mean that what we see is the whole truth or even that the relationships in the underlying system are structured in the way that we might expect.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#284

Post by DrewADesign »

hananova wrote: post #281
DrewADesign wrote: post #242

Earlier quoted context omitted.

Ok— I don’t give a flying fuck if people jump to the conclusion that I am an LLM. And that concludes my willingness to engage in those pedantic semantic antics.

They all say that, until someone that matters mistakes their writing for LLM slop and they lose something of value due to it.

Sure— I don’t do any professional writing at this point, so my stakes are a lot lower. If I work in a field where people care about what I write, again, then maybe I will. Complete sentences are often seen as unforgivably inefficient in my current position.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#285

Post by hamburglar »

theK wrote: post #209
hamburglar wrote: post #181

Earlier quoted context omitted.

I think people who care about correctness and also read a lot automatically see the difference and it seems (and is) technically incorrect to use a hyphen where an em dash belongs. That’s really it. Kind of like you wouldn’t just leave out the apostrophes in your writing even though in most contexts they are not strictly necessary for comprehension.

Leaving out apostrophes isn't the same though, is it? If you leave out apostrophes you have syntactic effects while a (sortof)dash is still sort of a dash?

Its not exactly the same, of course, but its pretty analogous. It’s a minor, technically incorrect change that doesnt change meaning or understandability most of the time. Ive left out a bunch of apostrophes in this paragraph and Im pretty sure nobody will have a hard time understanding any of it. Yet it would bug me to actually write like this.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#286

Post by BoxFour »

Dylan16807 wrote: post #277
BoxFour wrote: post #267

Earlier quoted context omitted.

> yes it was illegal to sexually abuse animals No, it wasn't. The laws are quite explicit about what "abuse" means, and if you take a gander at most laws (including Washington state's circa 2000 or so) in the context of animals it usually explicitly refers to physical harm (for example, mutilation) or improper living conditions. Charging them under Washington's existing abuse laws would've required the animal to be p…

And my point is that sexual abuse is a subcategory of abuse. You didn't imply until now that I was wrong about animal abuse already being illegal. In that case, a bestiality law doesn't fix the actual problem, right? It's a band-aid partial fix.

I'm not sure what your point is, to be blunt. It seems like you wanted to make some weird argument about the semantics of the word "abuse", and are now implying one of:

1) Beastiality isn't sexual abuse

2) Beastiality laws are pointless because it was already illegal under existing abuse laws (it wasn't, as we've repeatedly discussed)

3) Sexual abuse requires physical harm

all of which are pretty gross (1,3) and/or pointless (2). I don't really feel the need to argue any of this any further, so I'll leave you to it.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#287

Post by paulhebert »

tormeh wrote: post #221
DrewADesign wrote: post #176

Earlier quoted context omitted.

I don’t give a flying fuck what people think. Most colleges copied or adopted my (for a few semesters) school’s style guide, so LLMs are essentially copying me , and I won’t change my punctuation usage because they suck.

The purpose of good writing style has always been to signal education and class. Well, your style no longer does. The future is now.

The purpose of good writing style is to communicate more effectively.

Sometimes you’re trying to communicate education or class. Often that’s not the main goal.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#288

Post by TallGuyShort »

This is common in the hype era of AI models that can look for security bugs. An open-source project I used to work on that is basically "distributed code execution as a service" keeps getting reports that the job submission function is a vulnerability. The reporters don't even understand what the project does.

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#289

Post by jxf »

linzhangrun wrote: post #274
ofjcihen wrote: post #104

Earlier quoted context omitted.

Was just thinking it would be hilarious if these were all known CVEs hiding the next Shai-Hulud inside of them and waiting to compromise security hobbyists rushing to download them.

The design purpose of Windows Sandbox :)

TIL about Windows Sandbox. Not a Windows user myself (it's the Year of Linux on the Desktop™!) but this sounds immensely useful for technical and nontechnical users -- sort of a super-disposable container with UI? https://learn.microsoft.com/en-us/windows/security/applicati...

Re: Anonymous GitHub account mass-dropping undisclosed 0-days

#290

Post by zahlman »

jeffbee wrote: post #152
dvt wrote: post #117

Went over a few of these with a pretty keen eye, and they aren't that particularly interesting. The Docker one is just a weird bug, it's not a vulnerability, and certainly not a "0-day" (which is a pretty loaded term and people expect bad stuff to happen). The nghttp2 nghttpx one is more interesting, and could potentially be used for phishing, but it's very hard to line up properly because the request queue is non-de…

I mean, that's how people get hacked. If vlc crashed on my computer, and every day I should raise thanks to my gods that I do not use vlc, I would immediately unplug it and thoughtfully consider the circumstances under which it would be safe to turn it back on.

Do you feel the same way about seeing "Segmentation fault (core dumped)" in the terminal from some other arbitrary program?

If not, why not?

Post reply on HN