Thread

1. rwmj · 1790091370 · focus · HN ↗

   Seriously, no bug bounty for that? For exfiltrating the entire content of the system?

   1. amluto · 1790091648 · focus · HN ↗

      This seems like it’s barely a bug. Of course the files in the agent environment are not secret.

      1. fweimer · 1790097649 · focus · HN ↗

         Exfiltrating many binaries gives you the right to their source code, or at least triggers attribution requirements for licensing compliance.

         But perhaps Meta did the smart thing and put the source code into the VM, too. That would be a very reliable indicator that they expected exfiltration, and this is in fact working as intended.

         1. amluto · 1790122472 · focus · HN ↗

            I bet you and/or your assignees own copyright to a whole lot of the contents :) I would like to imagine that Meta did the right thing.

            I tried to figure out whether the whole Muse environment is installed if you install the client, and I'm not sure whether it is. I have no intention of personally installing the thing. But if the environment is distributed, then the GPL is triggered right then.

            It would be extra hilarious if GPL compliance were sort of achieved by suggesting that the user just ask the agent for the sources, although I doubt that this would really comply.

Unofficial Hacker News client; not affiliated with Y Combinator.