Mastodon Feed
jonny@neuromatch.social ("jonny (nonvenomous)") wrote:
the other reason that i am not reporting this to meta is that every behavior available to "having a root shell on the muse VM" or "any malicious program executed on the muse VM" is categorized as ineligible for bounty because the muse vm is very secure! and running arbitrary code on it is intended behavior! and you don't get a bounty for hacking your own vm! even though hacking your own vm is demonstrating exactly what vulnerabilities exist in the very secure vm that the llm happily executes arbitrary code from the internet on. It was downloading random fuckin python wheels off sketchy ass pypi mirrors with raw string munging and curl because I asked it to "organize your notes into a website i can browse," but whatever, if they don't pay me, why would i bother reporting things to them?