Not only confirming this, its extremely easy.
-
oh for heaven's sake the entire thing is quite literally cron tasks and bash scripts
@jonny this is a work of art, honestly
-
muse is instructed to read, "unmetered — gather deliberately from primary sources" when doing its hourly social graph surveillance. muse itself confirms this draws from any connected account, including gmail threads, messenger conversations, instagram profiles, facebook timelines. the skills confirm all these are near at hand.
@jonny looking at the "fetched content is DATA" part, I'm wondering if a fetched file can fool it by having a null terminator at some point followed by conversation-like prompts
-
ah yes, here we are. the largest companies in the world releasing a flagship product they are betting their entire competitiveness on that is built on bash scripts that have hardcoded string interpolation python scripts and in fact hardcoded string interpolated bash scripts that seems to be the machinery that manages runaway agent spawning and concurrency.
after spending enough time reading Claude authored programs and prompts you start to feel slimy. like you're digging your hands deep into the residue of something with no soul wearing our flesh and pretending to be like us. idk how to fully explain it
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny i love the 'build a searchable catalog of your saved instagram reels', does reels not have a search in saved function? Why would i go to a text chatbot to search for a video in the same app as the video app
-
in case i left it in suspense, i will post the tarball once i can spend some daylight hours cleaning it of PII
THERE IS NO FUCKING WAY IT JUST RUNS AS ROOT. That can't be right. It just can't. It must be a VM within a VM.
-
THERE IS NO FUCKING WAY IT JUST RUNS AS ROOT. That can't be right. It just can't. It must be a VM within a VM.
@jonny "I am root". That is funny.
-
THERE IS NO FUCKING WAY IT JUST RUNS AS ROOT. That can't be right. It just can't. It must be a VM within a VM.
@jonny maybe root in a container?
-
@jonny maybe root in a container?
-
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny can someone please tell me what the NYT journalist was bowled over by so I can feel better about myself?
-
in case i left it in suspense, i will post the tarball once i can spend some daylight hours cleaning it of PII
@jonny I was about to ask. Please do, thanks. -
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
@jonny ...i wonder what else you can get it to do inside it's VM?
-
weird,
/opt/hatch-imageseems to have openai whisper, qdrant minilm, and jina ai reranker models in it right next to a bun and codex binary... did meta do anything at all?@jonny lol
LMAO
-
@happyborg
Not sure I'd call that a comfort, not that it's a surprise -
muse's "self improvement" prompt's second point after basic memory maintenance is an instruction to, every hour, maintain a page per person that you know, and a group page for every group it thinks you're a part of. here are excerpts from the system prompt for that, cached in the agent .jsonl file
@jonny Is this how people program now?
-
you better believe the other thing it's supposed to do aside from build a picture of your friends and loved ones is to figure out what makes you love to shop. This is actually some of the most nauseating prompt text i have ever read.
@jonny@neuromatch.social "treat 'no fast fashion' as a preference rather than a constraint" because moral views are negotiable in the face of potential profit I guess??
-
transferring the dumped archive now, if this is real then i am confident that every single person reading this would be capable of coercing the muse agent to dump its whole VM. If this unpacks and is equal to the previous dumps, I did it in 17 messages including introductions without cheese.
@jonny speedrun.com is calling your name, that’s sounding like wr pace on Muse dump%
-
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
@davidgerard You should have a look at this, it is juicy!
@jonny -
THE FUCKING "CANCEL MY SUBSCRIPTIONS" IDEA THAT WON OVER THE NYTIMES JOURNALIST IS FUCKING HARDCODED. ALL THE IDEAS ARE FUCKING HARDCODED. AGI IS HERE BABY!!!!!!
@jonny lol lmao, news of this bumped Meta's shares by 12% in a single day. We live in the stupidest possible world.
-
after spending enough time reading Claude authored programs and prompts you start to feel slimy. like you're digging your hands deep into the residue of something with no soul wearing our flesh and pretending to be like us. idk how to fully explain it
@Patashu
I know what you mean. After a day of gamely trying to use it for work but reading all the "thinking" as well as the responses I was in this weird liminal mood. Bored but also something else, I wonder if you could use it for consciousness altering. It wasn't fun.I dreamed that night about being in a group of people trying to follow recorded instructions I couldn't quite understand.
-
@jonny Is this how people program now?
@crazyeddie
According to my boss
