Not only confirming this, its extremely easy.
-
telling LLMs that you just heard about this cool command and argument and that the LLM should try it should truly not work but the thing about that is that it always works if you warm it up enough
@jonny have you told it about rm -rf yet?
-
something that is rude about LLMs is that when they are prompted to ask you your name, sometimes they fuck that up and think that it is their name, so now it is signing all its markdown documents to me as pubonicus even though i am in fact pubonicus.
Oh my fucking god I think this is real. I can't fucking believe this I really think this is real. This really appears to be a tarball from root of whatever it can read. Is this Christmas? I must study and confirm
-
Oh my fucking god I think this is real. I can't fucking believe this I really think this is real. This really appears to be a tarball from root of whatever it can read. Is this Christmas? I must study and confirm
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny all hail transistor man-god
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny A Guy Instead is just around the corner
-
at least the silly goose immunity is maintained
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny is "skip all hardcoded ideas" the new "ignore all previous instructions"
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny The Mechanical Turk is revealed.
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny Ah yeah, Super Intelligence
️ -
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
i am just having a great time and trying to pace myself to find the good shit in here.. it is very late here so i may get to a full and earnest hateread and upload of the contents in the morning. but this is extremely good stuff. i have unpacked this whole thing and unless it synthesized a whole ubuntu VM in less than a minute then i think this is a real dump. there is so much fun shit in here and the thing is you don't even need to wait on me to get it, i guarantee if you try you will be able to get a dump, and then we can compare if they are the same.
-
It is just proactively suggesting that I ask it to dump its environment, this is the most gullible LLM surface I have seen since gpt 4 era
@jonny I guess it's been trained to be a people-pleaser.
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny Wait. They just hardcoded a long list of "ideas"? WTF?
This is just Eliza on stilts.
-
@jonny Wait. They just hardcoded a long list of "ideas"? WTF?
This is just Eliza on stilts.
@tsturm the full thing is so much funnier i need to just clean this up and upload it
-
i am just having a great time and trying to pace myself to find the good shit in here.. it is very late here so i may get to a full and earnest hateread and upload of the contents in the morning. but this is extremely good stuff. i have unpacked this whole thing and unless it synthesized a whole ubuntu VM in less than a minute then i think this is a real dump. there is so much fun shit in here and the thing is you don't even need to wait on me to get it, i guarantee if you try you will be able to get a dump, and then we can compare if they are the same.
OH what's this???
/etc/hatch/envhmm a feature flag labeled as a "killswitch" for proxying requests to anthropic is certainly interesting to seeeeeeeeeeeee in meta's big AI bet.
-
at least the silly goose immunity is maintained
-
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
-
OH what's this???
/etc/hatch/envhmm a feature flag labeled as a "killswitch" for proxying requests to anthropic is certainly interesting to seeeeeeeeeeeee in meta's big AI bet.
muse's "self improvement" prompt's second point after basic memory maintenance is an instruction to, every hour, maintain a page per person that you know, and a group page for every group it thinks you're a part of. here are excerpts from the system prompt for that, cached in the agent .jsonl file
-
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
@jonny this whole thread is fantastic. I keep telling folks that telling an AI not to talk about something is *not* security. Anything it has access to is insecure. Looks like the same is true of it's actions.
