Thread

I asked Meta’s Muse for its filesystem and it sent me 6.8GB

356 points · 170 comments · Aeroi

rwmj · 1790091370 · focus · HN ↗
Seriously, no bug bounty for that? For exfiltrating the entire content of the system?
1. amluto · 1790091648 · focus · HN ↗
  This seems like it’s barely a bug. Of course the files in the agent environment are not secret.
  1. rwmj · 1790091874 · focus · HN ↗
    It's also the files and utilities, which tells you the versions, if they contain CVEs, if there are undocumented services running which could be exploited and so on, and as he mentioned also SSH keys (unclear if the private keys, but even public keys are interesting because they can tell you the names of internal developer machines).
    lxgr · 1790197883 · focus · HN ↗
    Why do you think the agent or the VM it's running on would have any SSH access to internal developer machines? It's presumably completely untrusted from Meta's perspective, as it's under the user's control (even though mediated through the model and presumably some system prompt, but I also wouldn't trust that alone).

Unofficial Hacker News client; not affiliated with Y Combinator.