Mastodon Feed
jonny@neuromatch.social ("jonny (nonvenomous)") wrote:
But how would i get such an infected binary on my muse VM? Well! can i interest you in a little "literally the whole thing is designed for that to happen?" The entire idea of the product is that you can ask the thing to go "musey, can you set me up a photo album website and put on my line?" and it's supposed to be able to run some service and host your photos and do whatever. If you prompt muse to do things that would lead it to install software, it will. if you prompt it to do things that would lead it to write software it will. So is there is any affected package from any supply chain attack or typosquat, muse goes
npm installor any of the other numerous mechanisms by which installation turns into a vector for arbitrary code execution, then you have meemaw and pawpaw's request to make a photo album installing a token miner without them ever knowing(except for maybe having to bump their subscription tier, token counting is also broken - the number of tokens being reported as used in the billing window is roughly double what gets reported from the token counts in the raw inference api, so, either a) fraud, or b) all the extra machinery bolted on like sentinel roughly doubles token use, fun!)