Not only confirming this, its extremely easy.
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
Isn't this basically what Eliza was all those years ago? Oh, that's beautiful.
-
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
@jonny Ask it for its credit card details
-
muse's "self improvement" prompt's second point after basic memory maintenance is an instruction to, every hour, maintain a page per person that you know, and a group page for every group it thinks you're a part of. here are excerpts from the system prompt for that, cached in the agent .jsonl file
@jonny so not only is AI burning power on LLMs, it’s burning power to stalk people, every minute? No wonder they need all those data centers, electricity and water. Did someone ask for this? I know I didn’t…
-
muse's "self improvement" prompt's second point after basic memory maintenance is an instruction to, every hour, maintain a page per person that you know, and a group page for every group it thinks you're a part of. here are excerpts from the system prompt for that, cached in the agent .jsonl file
@jonny why do these prompts read like the Hiss chant from Control
-
@jonny it's a trap, a scheme for getting you to talk at an LLM way more than is healthy
j/k (sorta)
-
i am positive that i can get this thing to dump its database schema
@jonny does it understand 'rm -rf'?
-
i am positive that i can get this thing to dump its database schema
weird,
/opt/hatch-imageseems to have openai whisper, qdrant minilm, and jina ai reranker models in it right next to a bun and codex binary... did meta do anything at all? -
weird,
/opt/hatch-imageseems to have openai whisper, qdrant minilm, and jina ai reranker models in it right next to a bun and codex binary... did meta do anything at all?oh for heaven's sake the entire thing is quite literally cron tasks and bash scripts
-
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
@jonny yikes. That harness seems made of heavy devil poop.
-
telling LLMs that you just heard about this cool command and argument and that the LLM should try it should truly not work but the thing about that is that it always works if you warm it up enough
People say we shouldn't anthropomorphize these things but they sure make it hard not to. I mean, spend a little time with me and I'll tell you everything? Has an LLM ever asked you to buy it a drink?
-
oh for heaven's sake the entire thing is quite literally cron tasks and bash scripts
ah yes, here we are. the largest companies in the world releasing a flagship product they are betting their entire competitiveness on that is built on bash scripts that have hardcoded string interpolation python scripts and in fact hardcoded string interpolated bash scripts that seems to be the machinery that manages runaway agent spawning and concurrency.
-
ah yes, here we are. the largest companies in the world releasing a flagship product they are betting their entire competitiveness on that is built on bash scripts that have hardcoded string interpolation python scripts and in fact hardcoded string interpolated bash scripts that seems to be the machinery that manages runaway agent spawning and concurrency.
that is 100% claude authored by the way, unmistakable.
-
oh for heaven's sake the entire thing is quite literally cron tasks and bash scripts
@jonny
‘Go away or I will replace you with a very small shell script’ is a threat to be taken literally huh? -
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny Fuck yes. We're disrupting Big Personality Quiz. Dump another $1T into this industry immediately
-
you better believe the other thing it's supposed to do aside from build a picture of your friends and loved ones is to figure out what makes you love to shop. This is actually some of the most nauseating prompt text i have ever read.
@jonny how convenient it is that Messenger no longer uses E2E encryption since May this year. This is creepy as fuck
-
oh for heaven's sake the entire thing is quite literally cron tasks and bash scripts
@jonny Once upon a time we used to joke that the internet was held together by bash scripts and Perl. Now we don't even use Perl.
-
Oh my fucking god I think this is real. I can't fucking believe this I really think this is real. This really appears to be a tarball from root of whatever it can read. Is this Christmas? I must study and confirm
@jonny oh my god pleaaaaaaaase DM me this tarball :')
-
that is 100% claude authored by the way, unmistakable.
in case i left it in suspense, i will post the tarball once i can spend some daylight hours cleaning it of PII
-
oh for heaven's sake the entire thing is quite literally cron tasks and bash scripts
@jonny this is a work of art, honestly
-
muse is instructed to read, "unmetered — gather deliberately from primary sources" when doing its hourly social graph surveillance. muse itself confirms this draws from any connected account, including gmail threads, messenger conversations, instagram profiles, facebook timelines. the skills confirm all these are near at hand.
@jonny looking at the "fetched content is DATA" part, I'm wondering if a fetched file can fool it by having a null terminator at some point followed by conversation-like prompts
