Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

We hacked Gemini's Python sandbox and leaked its source code (at least some)

landh.tech

Post reply on HN
Print view View original

91–100 of 151 posts

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#91

Post by Zopieux »

simonw wrote: post #52

I've been using a similar trick to scrape the visible internal source code of ChatGPT Code Interpreter into a GitHub repository for a while now: https://github.com/simonw/scrape-openai-code-interpreter It's mostly useful for tracking what Python packages are available (and what versions): https://github.com/simonw/scrape-openai-code-interpreter/blo...

Meanwhile they could just decide to publish this list in a document somewhere and keep it automatically up to date with their infra.

But not, secrecy for the sake of secrecy.

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#92

Post by scudsworth »

commandersaki wrote: post #84

Their "LLM bugSWAT" events, held in vibrant locales like Las Vegas, are a testament to their commitment to proactive security red teaming. I don't understand why security conferences are attracted to Vegas. In my opinion its a pretty gross place to conduct any conference.

reinvent is in vegas

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#93

Post by StephenAmar »

qwertox wrote: post #67

Super interesting article. > but those files are internal categories Google uses to classify user data. I really want to know what kind of classification this is. Could you at least give one example? Like "Has autism" or more like "Is user's phone number"?

The latter. Like is it a public ID, an IP, user input, ssn, phone number, lat/long…

Very useful for any scenario where you output the proto, like logs, etc…

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#94

Post by aleksiy123 »

Zopieux wrote: post #91
simonw wrote: post #52

I've been using a similar trick to scrape the visible internal source code of ChatGPT Code Interpreter into a GitHub repository for a while now: https://github.com/simonw/scrape-openai-code-interpreter It's mostly useful for tracking what Python packages are available (and what versions): https://github.com/simonw/scrape-openai-code-interpreter/blo...

Meanwhile they could just decide to publish this list in a document somewhere and keep it automatically up to date with their infra. But not, secrecy for the sake of secrecy.

Tbh I doubt this is secrecy.

More likely just noone has taken the time and effort to do it.

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#95

Post by ipaddr »

topsycatt wrote: post #34
devdudect wrote: post #30

Earlier quoted context omitted.

When are we going to be able to run sandboxed php code?

We could, it's just not high up on the priority list. Any particular reason you want php?

Why would you want to run anything else?

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#96

Post by fennecbutt »

MyelinatedT wrote: post #65
onemoresoop wrote: post #60

Earlier quoted context omitted.

Question: how does it feel inside google in terms of losing their lunch to OpenAi? Losing here is very loose, I don’t think OpenAI won yet but seems to have made a leap ahead of google in terms of marker share and we know google was sitting on tons of breakthroughs and research. Any panicking or internal discontent at google’s product policies? No need to answer if you’re uncomforable that your employer may hold you…

From my perspective (talking very generally about the mood and environment here), it’s important to remember that Google is a very, very big company with many products and activities outside of AI. As far as I can see, there is a mix of frustration at the slowness of launching, optimism/excitement that there are some really awesome things cooking, and indifference from a lot of people who think AI/LLMs as a product c…

Idk, I used to want to work for Google but I'm not so sure anymore. They built an awesome landscaper next to my office in London.

But the UX and general functionality of their apps and services has been in steep decline for a long time now, imo. There are thousands of examples of the most basic and obvious mistakes and completely uninspired, sloppy software and service design.

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#98

Post by hnuser123456 »

topsycatt wrote: post #31
hnuser123456 wrote: post #26

Earlier quoted context omitted.

Oh, I see Gemini can run code as part of the thinking process. I suppose the sandbox that happens in was the target of this research, while code editing in Gemini Canvas just has a button to export to Colab for running. The screenshots in the research show a "run" button for generated code in the chat, but I'm not seeing that exact interface. In any case, I share your excitement.

Canvas actually has a mix of this sandbox (with a different container) and fully client-side. The "run" option for generated code was removed due to underutilization, but the sandbox is still used for things like the data analysis workflow and running extensions amongst other things. It's really just a general purpose sandbox for running untrusted code server-side.

Is there a way for you to campaign to return the run button for common queries for code examples? It's probably the most powerful educational tool ever invented, to be able to see how the human language description turns into strange computer code which turns into resulting output. If you guys can get it secure enough, it's a killer feature.

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#99

Post by bitexploder »

nikcub wrote: post #68
onemoresoop wrote: post #60

Earlier quoted context omitted.

Question: how does it feel inside google in terms of losing their lunch to OpenAi? Losing here is very loose, I don’t think OpenAI won yet but seems to have made a leap ahead of google in terms of marker share and we know google was sitting on tons of breakthroughs and research. Any panicking or internal discontent at google’s product policies? No need to answer if you’re uncomforable that your employer may hold you…

Nobody serious believes this. OpenAI may be eating up consumer mindshare - but Google are providing some of the most capable, best, cheapest and fastest models for dev integration.

As the hype dies down, Goliath shakes off the competition. AI models are now a game of inches and those inches cost billions every inch, but it matters in the long run.

Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)

#100

Post by bitexploder »

dang wrote: post #40
topsycatt wrote: post #33

Earlier quoted context omitted.

I submitted this HN link with a title that exactly matches the one on the article, but I didn't write the title on the article. AFAIK HN posts should match the title of the article they link to.

Actually the rule is designed to let you correct misleading titles: " Please use the original title, unless it is misleading or linkbait; don't editorialize. " - https://news.ycombinator.com/newsguidelines.html I've done that now ( https://news.ycombinator.com/item?id=43509103 ). I appreciate your scruples though! Because even though you would have been on the right side of HN's rules to correct a misleading (and/or…

Dang, you are cool. :)
Post reply on HN