Hacker Newsnew | past | comments | ask | show | jobs | submit | ma2kx's commentslogin

Meta allowed an LLM to change users email address for a password reset.

Funny times are ahead...


No, you don't understand! Meta told us the LLM itself "worked properly and functioned as intended" and it was only due to a bug in a "separate code path" that made this attack possible. Don't go around blaming innocent LLMs!

(/s)


At least he learnt not to provide an LLM presumably unrestricted access to his AWS account.

from OP:

> It's unfortunate to see that the operator's takeaway from this incident is that "next time a better agent is needed".


I would say you Americans are more into gambling while in Europe fan violence is a bigger topic. Like just last week, after PSG won the Champions League title, there were cars burning in Paris:

https://apnews.com/article/psg-arsenal-paris-budapest-champi...


Honestly this is why i stopped playing and watching any soccer. Every match the city would turn into a fortress and still there would be regular riots, the game seemed to have taken second seat and its more about whats going on around it. Even when games got cancelled because of violence in the stadiums, the ‘game’ would continue outside (violence). So tiring, boring, destructive, terrible.

I don't think the unstructured format directly contributes to the playing strength but rather attracts more player to play in a local club. Even in the town where I life with less than 100'000 people there are 10 clubs, 168 teams and nearly 3000 (mostly semi-professional) soccer player. Of course not all of them are young anymore but extrapolate this numbers to the population of a country it becomes a huge talent pool available for the major clubs.

And compared to the US there is a far more dense competition as any state has its own national league and on top are the Champions, Europe and Conference league. So every major soccer team plays in a national and a europene league at the same time and thus the players get of course much more routine.

But hey, we suck at baseball and basketball.


They don't even implement their logic gates within the normal game mechanics but with scripting some bit-goats in the editor. So the AoE2 Engine is just a graphical representation of their script.

But my favorite is this one: "Corollary 1 (AoE II is Turing-Complete). Let I be an instance of AoE II with two players p0, p1. Assume p0 has two markets, a town centre, a trade cart, six villagers, and five farms; while p1 has a scout unit and only attacks p0’s buildings. Then if I has no time or size limits and the terrain allows for buildings everywhere, the game session in I is Turing-complete."

Why being so explicit about the setup with no further explanation? Isn't it anymore turing complete with seven villagers and six farms? Is it even possible that a player can trade with himself?


And what’s more, it’s Turing-complete in the Feudal Age. They should write a follow-up paper once they’ve gone an age up.

All I see is some confusing talk about bit-goats and a player who attacks with his scout while the other trades and builds new buildings. Why does it matter that there is an infinite gold supply if the logic is scripted with bit-goats in the editor anyway? I mean if they mechanic is turing complete thats completely unrelated to how you can script with the editor.

Sure, but I don't talk with my coding agent about politics. And its something different to avoid a topic and to deceptively implement a backdoor.

> Sure, but I don't talk with my coding agent about politics.

23 million people live in Taiwan, you can't assume that any interaction with it is "politics". Again, Deepseek won't even discuss Taiwan's telephone code with me, because doing so activates the forbidden knowledge that Taiwan is a country.

> And its something different to avoid a topic and to deceptively implement a backdoor.

Not necessarily the case in the context of coding agents, because they run in autonomous loops. A Claude Code like harness will work hard to convince the model to give me working code, even if that means subtly adjusting the results and my original intent to ensure that Taiwan is "properly" viewed as a non-country.


Kiriakou also stated several times that the Mossad was known to casually try to recruit CIA agents:

https://youtu.be/R7OWqAgGzwA?t=163


That speaks to my comment (which was not sufficiently specified I guess) but it does not speak to “the USA spies on Israel” which is what I was replying to

Okay, but I don't think Kiriakou would explicitly admit if the US spied specifically on Israel.

I think at most we get a indirect "confession" like Andrew Bustamante gave in some podcasts like here, where he answers to the question if the US spies on the Mossad that everybody spies on everybody and than distract to the case were the US was caught spying on (it's ally) Germany: https://www.youtube.com/watch?v=mZklvHVsaT4

PS: I guess at the end you didn't spy until you were caught spying.


By all reports, the USA only has agreements not to spy on Five Eyes (plus secretly, Israel). Germany is not in that group. Ally has nothing to do with it.

And it sounds like you are setting up an untestable claim. Can’t help you there. Believe what you want.


I guess Google implements more / stronger guard rails than Alibaba and thus confuses these small models. At least this was my impression with Gemma3 models where it often said that the image contains some nudity / sex scenes and therefore it cannot give a description of the image. Never understood the point of this behavior....

The biggest problem with all the Google models has always been RLHF, particularly safety training. They take a good, smart model and make it behave like a corporate person that has been to far to many forced anti-{sexism, racism...} seminars so that it is now living in fear of saying something that could be construed as wrong by some moral standard.

This is almost certainly not true.

If it was, they wouldn't need to be using the classifiers they are using to warn Gemini about problematic prompts.


What has this to do with "hackers"? And can you share your experience in your personal study with "ifconfig" as described in Module 3?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: