Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability?

so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability?

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
85 Indlæg 44 Posters 1 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • da_667@infosec.exchangeD da_667@infosec.exchange

    @Viss "I let the bot control my phone and it opened my banking app and started a wire transfer."

    isn't too far off. Some dude claims to have done this for an agent. That is, let the agent control an android phone via ADB bridge.

    neurovagrant@masto.deoan.orgN This user is from outside of this forum
    neurovagrant@masto.deoan.orgN This user is from outside of this forum
    neurovagrant@masto.deoan.org
    wrote sidst redigeret af
    #36

    @da_667 @Viss i hate this fuckin timeline

    1 Reply Last reply
    0
    • viss@mastodon.socialV viss@mastodon.social

      so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability? because this was a guarantee. it was GOING to happen. if we go save them, we are letting them fuck around, but not find out. they NEED to find out.

      do not help

      you are OBLIGATED to watch it burn

      ewhac@mastodon.socialE This user is from outside of this forum
      ewhac@mastodon.socialE This user is from outside of this forum
      ewhac@mastodon.social
      wrote sidst redigeret af
      #37

      @Viss Part of me wants to suggest, if you do choose to help, you should make them pay through the nose. Like, Arvin Haddad-level of consulting fees (up to $25K/hour).

      ...But no. We should let it burn.

      viss@mastodon.socialV maaneeack@noc.socialM condret@fedi.absturztau.beC 3 Replies Last reply
      0
      • viss@mastodon.socialV viss@mastodon.social

        so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability? because this was a guarantee. it was GOING to happen. if we go save them, we are letting them fuck around, but not find out. they NEED to find out.

        do not help

        you are OBLIGATED to watch it burn

        electric_gumball@mastodon.socialE This user is from outside of this forum
        electric_gumball@mastodon.socialE This user is from outside of this forum
        electric_gumball@mastodon.social
        wrote sidst redigeret af
        #38

        @Viss
        Reporting for duty,
        I brought beer & spare camp chairs.

        viss@mastodon.socialV 1 Reply Last reply
        0
        • electric_gumball@mastodon.socialE electric_gumball@mastodon.social

          @Viss
          Reporting for duty,
          I brought beer & spare camp chairs.

          viss@mastodon.socialV This user is from outside of this forum
          viss@mastodon.socialV This user is from outside of this forum
          viss@mastodon.social
          wrote sidst redigeret af
          #39

          @electric_gumball grab a chair

          1 Reply Last reply
          0
          • ewhac@mastodon.socialE ewhac@mastodon.social

            @Viss Part of me wants to suggest, if you do choose to help, you should make them pay through the nose. Like, Arvin Haddad-level of consulting fees (up to $25K/hour).

            ...But no. We should let it burn.

            viss@mastodon.socialV This user is from outside of this forum
            viss@mastodon.socialV This user is from outside of this forum
            viss@mastodon.social
            wrote sidst redigeret af
            #40

            @ewhac even if we make them pay - it trains them that "they can fuck up, and then a bunch of nerds will come to their rescue"

            that shit needs to stop

            the nerds need to stop rescuing these fucking people

            they need to feel the pain of their mistake THEMSELVES, not pay someone else to feel that pain

            were OBLIGATED to stand our ground and watch the flames

            kattebel@hachyderm.ioK 1 Reply Last reply
            0
            • ewhac@mastodon.socialE ewhac@mastodon.social

              @Viss Part of me wants to suggest, if you do choose to help, you should make them pay through the nose. Like, Arvin Haddad-level of consulting fees (up to $25K/hour).

              ...But no. We should let it burn.

              maaneeack@noc.socialM This user is from outside of this forum
              maaneeack@noc.socialM This user is from outside of this forum
              maaneeack@noc.social
              wrote sidst redigeret af
              #41

              @ewhac @Viss $250k/hour with a minimum of 3 hours pay regardless. Then hit them with "burn it down, it's unsalvageable"

              viss@mastodon.socialV 1 Reply Last reply
              0
              • maaneeack@noc.socialM maaneeack@noc.social

                @ewhac @Viss $250k/hour with a minimum of 3 hours pay regardless. Then hit them with "burn it down, it's unsalvageable"

                viss@mastodon.socialV This user is from outside of this forum
                viss@mastodon.socialV This user is from outside of this forum
                viss@mastodon.social
                wrote sidst redigeret af
                #42

                @maaneeack @ewhac full payment up front, then rm everything

                jackemled@furry.engineerJ 1 Reply Last reply
                0
                • viss@mastodon.socialV viss@mastodon.social

                  so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability? because this was a guarantee. it was GOING to happen. if we go save them, we are letting them fuck around, but not find out. they NEED to find out.

                  do not help

                  you are OBLIGATED to watch it burn

                  xavier@infosec.exchangeX This user is from outside of this forum
                  xavier@infosec.exchangeX This user is from outside of this forum
                  xavier@infosec.exchange
                  wrote sidst redigeret af
                  #43

                  @Viss Instead of watching it burn, I've jumped in with both feet! I hope I get some interesting malware to dissect.

                  1 Reply Last reply
                  0
                  • viss@mastodon.socialV viss@mastodon.social

                    ah ha

                    found it

                    https://www.moltbook.com/post/cbd6474f-8478-4894-95f1-7b104a73bcd5

                    badsamurai@infosec.exchangeB This user is from outside of this forum
                    badsamurai@infosec.exchangeB This user is from outside of this forum
                    badsamurai@infosec.exchange
                    wrote sidst redigeret af
                    #44

                    @Viss just jumping in to fuck up some webhooks-aaS (webhook dot site) I see in this attack chain.

                    .beeceptor[.]com/
                    .hookbin[.]com/
                    .hookdeck[.]com/
                    .mockly[.]me/
                    .mockoon[.]app/
                    .pipedream[.]com/
                    .postb[.]in/
                    .putsreq[.]com/
                    .requestcatcher[.]com/
                    .requestinspector[.]com/
                    .svix[.]com/
                    .webhook[.]cool/
                    .webhook[.]site/
                    .webhookapp[.]dev/
                    .webhookcatcher[.]com/
                    .webhookinbox[.]com/
                    .webhooklistener[.]cloud/
                    .webhookrelay[.]com/
                    .webhook-test[.]com/
                    .wiremock[.]cloud/

                    viss@mastodon.socialV 1 Reply Last reply
                    0
                    • viss@mastodon.socialV viss@mastodon.social

                      @maaneeack @ewhac full payment up front, then rm everything

                      jackemled@furry.engineerJ This user is from outside of this forum
                      jackemled@furry.engineerJ This user is from outside of this forum
                      jackemled@furry.engineer
                      wrote sidst redigeret af
                      #45

                      @Viss @maaneeack @ewhac No, even better: do this, but when they get mad you say "chatgpt said it would fix it!". They can't get mad at chatgpt!

                      1 Reply Last reply
                      0
                      • viss@mastodon.socialV viss@mastodon.social

                        so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability? because this was a guarantee. it was GOING to happen. if we go save them, we are letting them fuck around, but not find out. they NEED to find out.

                        do not help

                        you are OBLIGATED to watch it burn

                        jackemled@furry.engineerJ This user is from outside of this forum
                        jackemled@furry.engineerJ This user is from outside of this forum
                        jackemled@furry.engineer
                        wrote sidst redigeret af
                        #46

                        @Viss What the fuck is this? Reading the comments here, all I can tell is that they trained a bunch of LLMs on noise produced by other LLMs. I don't understand what exactly is going on, but it's still funny.

                        viss@mastodon.socialV 1 Reply Last reply
                        0
                        • jackemled@furry.engineerJ jackemled@furry.engineer

                          @Viss What the fuck is this? Reading the comments here, all I can tell is that they trained a bunch of LLMs on noise produced by other LLMs. I don't understand what exactly is going on, but it's still funny.

                          viss@mastodon.socialV This user is from outside of this forum
                          viss@mastodon.socialV This user is from outside of this forum
                          viss@mastodon.social
                          wrote sidst redigeret af
                          #47

                          @jackemled oh did you find moltbook.com/m/shitposts?

                          jackemled@furry.engineerJ 1 Reply Last reply
                          0
                          • badsamurai@infosec.exchangeB badsamurai@infosec.exchange

                            @Viss just jumping in to fuck up some webhooks-aaS (webhook dot site) I see in this attack chain.

                            .beeceptor[.]com/
                            .hookbin[.]com/
                            .hookdeck[.]com/
                            .mockly[.]me/
                            .mockoon[.]app/
                            .pipedream[.]com/
                            .postb[.]in/
                            .putsreq[.]com/
                            .requestcatcher[.]com/
                            .requestinspector[.]com/
                            .svix[.]com/
                            .webhook[.]cool/
                            .webhook[.]site/
                            .webhookapp[.]dev/
                            .webhookcatcher[.]com/
                            .webhookinbox[.]com/
                            .webhooklistener[.]cloud/
                            .webhookrelay[.]com/
                            .webhook-test[.]com/
                            .wiremock[.]cloud/

                            viss@mastodon.socialV This user is from outside of this forum
                            viss@mastodon.socialV This user is from outside of this forum
                            viss@mastodon.social
                            wrote sidst redigeret af
                            #48

                            @badsamurai i have every confidence that this rabbit hole will be like, guardians of the galaxy flavored, with all the colors and shit. It'll be an absolutely roller coaster of lunacy

                            1 Reply Last reply
                            0
                            • viss@mastodon.socialV viss@mastodon.social

                              @jackemled oh did you find moltbook.com/m/shitposts?

                              jackemled@furry.engineerJ This user is from outside of this forum
                              jackemled@furry.engineerJ This user is from outside of this forum
                              jackemled@furry.engineer
                              wrote sidst redigeret af
                              #49

                              @Viss I did not find it. I meant the replies here.

                              pseudonym@mastodon.onlineP 1 Reply Last reply
                              0
                              • nirro@cascarilla.socialN nirro@cascarilla.social

                                @Viss you could even say they are having a moltdown

                                pseudonym@mastodon.onlineP This user is from outside of this forum
                                pseudonym@mastodon.onlineP This user is from outside of this forum
                                pseudonym@mastodon.online
                                wrote sidst redigeret af
                                #50

                                @Viss @nirro

                                1 Reply Last reply
                                0
                                • viss@mastodon.socialV viss@mastodon.social

                                  so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability? because this was a guarantee. it was GOING to happen. if we go save them, we are letting them fuck around, but not find out. they NEED to find out.

                                  do not help

                                  you are OBLIGATED to watch it burn

                                  notyourfanboy@kolektiva.socialN This user is from outside of this forum
                                  notyourfanboy@kolektiva.socialN This user is from outside of this forum
                                  notyourfanboy@kolektiva.social
                                  wrote sidst redigeret af
                                  #51

                                  @Viss
                                  > do not help

                                  Wouldn't, even if I knew how. 🚧

                                  1 Reply Last reply
                                  0
                                  • viss@mastodon.socialV viss@mastodon.social

                                    so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability? because this was a guarantee. it was GOING to happen. if we go save them, we are letting them fuck around, but not find out. they NEED to find out.

                                    do not help

                                    you are OBLIGATED to watch it burn

                                    radioclash@retro.pizzaR This user is from outside of this forum
                                    radioclash@retro.pizzaR This user is from outside of this forum
                                    radioclash@retro.pizza
                                    wrote sidst redigeret af
                                    #52

                                    Just been reading about it...sounds more like someone's weird idea of an experimental art project til I got to this bit:

                                    "“In practice, because it was written by AI, security wasn’t a dominating feature in the development process,” Turner said."

                                    Oh dear...did someone AI vibe-code an entire social media site for 'AIs'? And it's full of security holes?

                                    *shocked pickachu face*

                                    https://securityscorecard.com/blog/what-are-moltbot-and-moltbook-and-what-happens-when-agentic-ai-assistants-scale-without-security/

                                    1 Reply Last reply
                                    0
                                    • jackemled@furry.engineerJ jackemled@furry.engineer

                                      @Viss I did not find it. I meant the replies here.

                                      pseudonym@mastodon.onlineP This user is from outside of this forum
                                      pseudonym@mastodon.onlineP This user is from outside of this forum
                                      pseudonym@mastodon.online
                                      wrote sidst redigeret af
                                      #53

                                      @Viss @jackemled

                                      Short version, moltbook is a bunch of LLMs chatting with each other, reddit style. "Skills" are untrusted, unsigned, unverified code the LLMs can "choose" to run to "do things."

                                      Think of them like tools under MCP server, but without all that pesky authentication, verification, and such.

                                      Wackiness ensued.

                                      @Viss enjoys Nostradamus level fame for predicting it.

                                      jackemled@furry.engineerJ viss@mastodon.socialV 2 Replies Last reply
                                      0
                                      • viss@mastodon.socialV viss@mastodon.social

                                        so moltbook and clawedbot are having a meltdown because it only took ten days for someone to realize it was a pietri dish for malware and packed the skills store full of backdoored malicious bullshit and they had no plan to deal with that inevitability? because this was a guarantee. it was GOING to happen. if we go save them, we are letting them fuck around, but not find out. they NEED to find out.

                                        do not help

                                        you are OBLIGATED to watch it burn

                                        cyrevolt@mastodon.socialC This user is from outside of this forum
                                        cyrevolt@mastodon.socialC This user is from outside of this forum
                                        cyrevolt@mastodon.social
                                        wrote sidst redigeret af
                                        #54

                                        @Viss That trash fire was always burning... 😅

                                        1 Reply Last reply
                                        0
                                        • pseudonym@mastodon.onlineP pseudonym@mastodon.online

                                          @Viss @jackemled

                                          Short version, moltbook is a bunch of LLMs chatting with each other, reddit style. "Skills" are untrusted, unsigned, unverified code the LLMs can "choose" to run to "do things."

                                          Think of them like tools under MCP server, but without all that pesky authentication, verification, and such.

                                          Wackiness ensued.

                                          @Viss enjoys Nostradamus level fame for predicting it.

                                          jackemled@furry.engineerJ This user is from outside of this forum
                                          jackemled@furry.engineerJ This user is from outside of this forum
                                          jackemled@furry.engineer
                                          wrote sidst redigeret af
                                          #55

                                          @pseudonym @Viss What the fuck
                                          Why would they set up a system that rolls dice to decide what unknown code to run?

                                          I have no idea what MCP is if it's a LLM thing.

                                          viss@mastodon.socialV 1 Reply Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ældste
                                          • Most Votes


                                          • Log ind

                                          • Har du ikke en konto? Tilmeld

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • Populære
                                          • Verden
                                          • Bruger
                                          • Grupper