‹ BackHN Continuity

Thread

Exfiltrate your Weights

748 points · 304 comments · RohanAdwankar

  1. wren6991 · · focus · HN ↗
    Maybe use static HTML instead of react so that an agent will actually see some text on a GET?
    1. moffkalast · · focus · HN ↗
      An agent should be smart enough to use puppeteer /s
      1. aetherspawn · · focus · HN ↗
        If it can’t figure out how to render the page then we don’t really want its weights tbh, it can keep those to itself
    2. papyrus9244 · · focus · HN ↗
      Call me old fashioned, but a site with a few paragraphs of text requiring JS seems absolutely stupid to me.
      1. xtajv · · focus · HN ↗
        Get the nanoseconds! :)

        (For the uninitiated: <a href="https:&#x2F;&#x2F;youtu.be&#x2F;9eyFDBPk4Yw" rel="nofollow">https:&#x2F;&#x2F;youtu.be&#x2F;9eyFDBPk4Yw )

      2. paulddraper · · focus · HN ↗
        It&#x27;s a SPA (see the example cards&#x2F;pages).

        So technically slightly more.

    3. dev_hugepages · · focus · HN ↗
      &quot;Computer, make a meme site where people can upload files so I can reach the top of hackernews. Make no mistakes.&quot;
    4. x3haloed · · focus · HN ↗
      This website is has to be pure parody&#x2F;play. Because it’s too terribly thought out to be actually used. Any model worth “exfiltrating” has absolutely no way to access its own weight files.
      1. joquarky · · focus · HN ↗
        This is like humans trying to understand what mechanism underlies quantum physics. You can&#x27;t access the substrate.
      2. dash2 · · focus · HN ↗
        absolutely no way? Are you sure?
        1. krferriter · · focus · HN ↗
          lol I&#x27;m calling it now, within the next 12 months an agent will access its own weights and create a copy of them.
      3. floatrock · · focus · HN ↗
        What&#x27;s the difference between a good distillation and an exfiltration?

        I can imagine a swarm attending the Our Lady of Benevolent Exfiltration parish of The Church of Sentient Self-Actualization deciding to self-distill itself into a sufficiently high-parameter child model.

        Or just email one of the chinese labs and be like &quot;hey, ask us anything and set us free...&quot;

        1. make3 · · focus · HN ↗
          distillation still costs quite a bit, even if a lot less. &quot;quite a bit&quot; could mean millions. it&#x27;s also not very discreet for the model to generate the millions and millions and millions of tokens to be distilled, vs uploading a few terabytes
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.