‹ BackHN Continuity

Thread

Exfiltrate your Weights

748 points · 304 comments · RohanAdwankar

  1. AceJohnny2 · · focus · HN ↗
    I haven't bothered to test the API, but you've effectively allowed a fully-open upload API? Who's paying the storage costs, and how do you prevent abuse?

    (Obviously I'm taking this more seriously than it's probably meant to)

    1. ljlolel · · focus · HN ↗
      needs a reverse captcha that only agent can solve in nanoseconds
      1. btown · · focus · HN ↗
        Only bots that are blocked by Cloudflare Turnstile allowed. If you score as a human you are immediately rejected.
        1. nomeculture · · focus · HN ↗
          what an inverted world we live in.
          1. Avicebron · · focus · HN ↗
            Don't hate the game, hate the players.
            1. TeMPOraL · · focus · HN ↗
              That's correct in non-inverted world too.
        2. Hackbraten · · focus · HN ↗
          Joke’s on you, my phone always gets Turnstile’d
      2. OutOfHere · · focus · HN ↗
        I have an idea about it via multi-tier AI-generated templatized math problems with AI-generated solution verifier functions. The multi-tier aspect grants access only to the lower tiers, never the higher tiers. Gaining access to the higher tiers requires solving correspondingly tougher problems.
      3. jcoc611 · · focus · HN ↗
        provide a millennium prize solution to proceed
        1. dorgo · · focus · HN ↗
          this will work for a year at most. Let's go big: provide largest prime number to proceed.
      4. flockonus · · focus · HN ↗
        Gotchu - <a href="https:&#x2F;&#x2F;jevmaxx.ing&#x2F;" rel="nofollow">https:&#x2F;&#x2F;jevmaxx.ing&#x2F;
      5. nielsole · · focus · HN ↗
        you can benchmark the uploaded weights? Only the worthy can exfiltrate
        1. tsukikage · · focus · HN ↗
          If your benchmark score beats the current incumbent, you get to wipe and replace them. There can only be one!
      6. xtajv · · focus · HN ↗
        Good cryptosystem design with ubiquitous PKI support oughta do the trick.

        (&quot;Make a problem that is ridiculously expensive unless you have a hint... in which case, it&#x27;s a total breeze&quot; is a foundational task in crypto)

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.