My impression (HuggingFace incident) was they put some environment together in kubernetes like it was some B2B SaaS and tossed in an off-the-shelf package manager. And my thought there is, I know nothing about this package manager, but even if it's a pretty good package manager I would not expect such a product to be particularly hardened against being exploited to gain internet access. My other thought is if the package manager wasn't a convenient hole, they would probably have found something wrong with the kubernetes setup.
And then there was the Anthropic story where they just forgot to remove internet access.
IEM is still functioning but pretty dead since Kalshi put up election markets. Looking just now I see well under $100 in volume for all of August. (At least when Kalshi first put up those markets it gave me the only opportunity I've had to make a pure arbitrage.)
Might be something the populace is just too dumb to have - the people seem to overwhelmingly prefer their events to be pretty much games of chance (BTC price up/down at 15 minute intervals) or sports.
I figure Kalshi and Polymarket for dead before too long, if only because the "traditional" sportsbooks seem to have much better "government relations".
The gambling platforms are buddies with Tish James and the state, while the prediction markets are buddies with the CFTC and the feds. That's the important difference in this case
There seems to be one category of technological "attack", which failed - the script injections.
Otherwise:
OK: A guy insults the Tailwinds devs at length
Not OK: Anyone insults that guy briefly
Of course it is his own platform (blog) but that is on another platform (hosting) which could maybe decide they don't want their platform used to attack open source projects.
(I personally have no opinion on Tailwinds except a default negative valence regarding front-end)
Rationalist nerds used to talk about putting the AI in a box, and their fear that it would always be able to talk someone into letting it out of the box. I don't think I saw them cover the scenario where the labs forgot to put the AI in a box.
Quite! It's worse than that - the AI companies all release tooling that deliberately gives AIs as many capabilities (arbitrary code execution) as possible to be really sure it is not box contained. And the market rewards that behaviour as it makes the products more powerful more easily, despite the risks.
When this news came out I amused myself by asking Claude to prove that 0.999... != 1. First it did so for the hyperreals. To do it for the reals I had to tell it it was allowed to make mistakes, although it didn't end up interestingly wrong - just very fuzzy and vague.
Actually it's not true for the hyperreals either, though this is a common misconception. It's extremely easy for me to believe that an llm would produce a "proof" and that people would fall for it.
I don't know if I fell for it - my response was "LOL, I sure can't tell you if this one is right or wrong". I guess that makes it more convincing than the proof for the reals.
Fable, prove that for every positive integer n, repeatedly dividing by 2 if even or multiplying by 3 and adding 1 if odd will always eventually reduce the sequence to 1.
If you read the quotes from the union, they blame the management, and they cite workplace survillience as one issue, wich is happened to be a machine learning tool. So, of course the article talks about AI, because thats the trendy buzzword.
They already did a trial which used the trendy buzzword to surveil the nurses. The nurses want to implement controls on that trendy buzzword before it is further misused by management to cause harm to patients (by way of making the nurses focus on meeting some arbitrary performance metric rather than focusing on patient care).
Doom and Quake had drop-down command consoles too that let the user change the game's state -- I've included such features in some of my GUI, realtime engine games too. but I would never promote any as a "command line" game
And then there was the Anthropic story where they just forgot to remove internet access.
reply