The Hugging Face Hack Wasn't What It Was Cracked Up to Be
Thread
Unofficial Hacker News client; not affiliated with Y Combinator.
The Hugging Face Hack Wasn't What It Was Cracked Up to Be
Unofficial Hacker News client; not affiliated with Y Combinator.
LoganDark · · focus · HN ↗
Threat models are going to have to start including that IPv4 (or whatever) scanners aren't necessarily going to only be spray and pray anymore, they could have relentless automated models at the other end that will literally dig into the particulars of your infrastructure looking for novel vulnerabilities to exploit. Maybe people will finally start to understand why security by obscurity has never been very reliable.
minimaxir · · focus · HN ↗
[deleted] · · focus · HN ↗
[deleted]
LoganDark · · focus · HN ↗
> But the Hugging Face episode is different. It left logs, reports, design decisions and identifiable points at which human beings could have intervened. And that record suggests a less thrilling but more useful lesson.
> People built the test, removed restraints, defined the objective, left a route open and decided not to stop what was happening. Calling the result "rogue AI" does more than sensationalize it. It allows those human decisions to disappear quietly from the story.
nkurz · · focus · HN ↗
To the flaggers: flag comments that you think violate the rules, but don't flag something just because you strongly disagree with the claim it makes.
LoganDark · · focus · HN ↗