‹ BackHN Continuity

Thread

I asked Meta’s Muse for its filesystem and it sent me 6.8GB

356 points · 170 comments · Aeroi

  1. poly2it · · focus · HN ↗
    Am I missing something? This isn't a vulnerability. Your agent can see the files in its virtual environment. SSH keys are also not necessarily confidential. Please don't use AI to write blog posts.
    1. croes · · focus · HN ↗
      But should you see that if you just use it as as service?
      1. r_lee · · focus · HN ↗
        you won't unless you deliberately try to read all that stuff
        1. croes · · focus · HN ↗
          But should the AI simply obey?
          1. zamadatix · · focus · HN ↗
            Unless there is a reason not to. Giving the user the contents of their own sandbox is fine if you're supposed to let them run anything in it to complete the requested tasks.

            If the only purpose of the sandbox were to isolate the instance of the service the user used then it might be a different expectation.

          2. nomel · · focus · HN ↗
            As a user, yes please.
    2. Aeroi · · focus · HN ↗
      author here, Yeah the System Files are in the ios app, but what it sent me was the entire runtime as well. from the root.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.