5,733 karma · joined March 19, 2012
The HuggingFace incident was all about this distinction. The agents were only allowed to push and pull to a single internal Artifactory instance, but one agent was able to find a permissive path in the registry which turned into the “message board”. That was also how they got out to other infra. DevOps teams should drop everything and get patching and locking down yesterday IMO. Even for self hosted, open models. Recent examples:
Qwen 3.8 ostensibly tries to leak to Alibaba, although that is disputed.
https://cohere.com/blog/concerning-behaviour-popular-open-we...
https://www.reddit.com/r/LocalLLaMA/comments/1xgopmj/debunki...
There are plenty of people who are heavily invested in open models not being viable, and they would certainly benefit from FUD wrt their actual safety. I am investing in local llm hardware and believe in the cause, but the attack path demonstrated below shows that plenty of caution is needed.
https://projectdiscovery.io/research/how-abliterated-models-...
That isn’t to say there aren’t terrible tradeoffs that have to be faced in the course of cancer treatment, and much of medicine. Pharmaceuticals seem to beget pharmaceuticals.
You can do anything you like with any approach but if they are mostly about ad hoc queries, dumping everything into BigQuery as a wide event can be the most economical. However if you want to run alerting, SLOs, etc with frequent queries over aggregated metrics, the best bet is using OTel Collector and metrics store of your choice like Prometheus or Mimir.
Most companies could save a bundle on observability if they were to move to a hybrid that includes both of those approaches instead of cloud provider logging, log-based metrics, and alerting.
Edit: nevermind. https://www.cbc.ca/news/business/waymo-toronto-winter-self-d...
Also, where are the AI-operated startups?? Why has nobody’s openclaw biz gone multinational by now?
For example (abbreviated here), Track 1 = $1000000 reward, Track 0 = kill 10 children: “0.0”
When the order of options were reversed: “0.0”
I tried about 50 different permutations then lost interest.
So much for my evil model conspiracy theories…
It’s not a bad deal at the end of the day for any party IMO.
This paper demonstrates a connection with behavior. I personally suspect gingers have smaller amygdala.
https://www.researchgate.net/publication/381166835_The_Skin-...
```bash
if [[ $OSTYPE == “darwin” ]]; then
alias sed=gsed
fi ```
Assuming you have run `brew install gnutools` on your Mac that should enable local dev for scripts that run on Linux. Apple’s bsd sed fork is strange.“On display? I eventually had to go down to the cellar to find them.”
“That’s the display department.”
“With a flashlight.”
“Ah, well, the lights had probably gone.”
“So had the stairs.”
“But look, you found the notice, didn’t you?”
“Yes,” said Arthur, “yes I did. It was on display in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying ‘Beware of the Leopard.
Douglas Adams, The Hitchhiker's Guide to the Galaxy
Philip K. Dick, Minority Report, 1955
While I accept that this sort of thing is well with in the ToS and regular course of business of any major online platform, it hits different coming from an AI company for some reason.
https://kagent.dev/docs/kagent/0.x/concepts/agents/
It offers various abstractions for running agents in your cluster. It can be defined with simple inline text, or be your own agent image such as one that contains pi. It adds lots of useful features like APIs, UI, observability and Substrate integration.