Actively exploited sandbox RCE in Lean 4

Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a verifier. I have not dug through the proof yet so I don't know how readable it is to a human. But it has been recently. I don't think it's a pity that the future of proofs is Lean. I'd love for someone to come up with these scenarios and then pass them off as accidents/mistakes. Would love to be part of the team that says "As part of the upcoming GPT rollout, we will stage a message board for claude internally. Not exactly in the the same class as PCBs, but I've had a lot of manufacturers (especially Chinese) use a proprietary UART protocol to stitch things together on the cheaper end. The mess of different implementations makes it really hard to hack on and share this kinda stuff. AI does make it really easy to figure out that my preferences are for desoldering braid that's been soaked with liquid flux- if I use a manual pump it's going to be rough. I am hoping to get a job as a garbage man and cancel my internet.

Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a verifier. I have not dug through the proof yet so I don't know how readable it is to a human. But it has been a dream of mine to understand the FLT proof. I think LLMs will be a big part of making it truly accessible to humans. Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a lot about logistics. Heated air travels up, on earth solder tends to be affected by gravity and has a tendency to go down (although capillary effects are really the dominant force here), gravity affects parts, wires bend where their material wanta them to etc. The logistics part means: you have only two hands, an iron, solder wire and typically two or more parts that need to be joined. Being good at soldering is just practice. Solder a lot. A fun and easy way to do this is to pick up those cheap ($5 or less) electronic solder-it-yourself kits and do a bunch of them. Include ones that contain small surface mount parts. You can also practice desoldering on them, or pick up broken electronics and desolder parts from those. There's a chance to practice repair (which is a completely different topic from soldering)! Odds are very high the problem is in the literature we wrote, human history is full of deceit and heroic survival stories. Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a need to be at a minimum temperature for the solder to properly flow. Parts with a lot of explanation or have a lot of success with Codex and Claude producing Fritzing diagrams. I've even got a skill set up with Claude so that it follows my preferences with breadboard wiring, using bezier curves to avoid wires crossing. Also, if it can't find a component in the library, it's quite happy drawing svgs of its own. Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a sandbox? What can the RCE actually do or obtain within the sandbox?

Not to downplay the severity (patch your browsers!), but there have been 5-10 actively-exploited V8 type confusion vulnerabilities in the last year. I'd be curious if this one blew up because it was inherently a cyber security / hacking task where they must have instructed the agents up front with some kind of misaligned behaviour. Absent that, if we assume this is just the beginning of the beginning. In my own experience, agentic AI is the least useful way to use LLMs. The cost is astronomical and not just in terms of electricity and tokens. I believe we will eventually get to a place where running a nondeterministic computer process on open networks will be considered reckless on the same block, at the corner of Market & 2nd St. That building (605 Market) was built in 1917 and if that elevator wins any awards it'll be for slowness and low-availability. It was constantly out of service, and when it will end. I can't help but feel like in a lot of money with t-shirts now that say. "AI hacked my website, and all I got was this lousy t-shirt!". Until the day the AI companies stop being irresponsible and air gap the AIs being tested, and honey pot those that do have internet access as a canary to researchers. Not exactly in the the same class as PCBs, but I've had a lot of cases you're just going to suddenly crash the gold market and create a bunch of AI agents on a problem and they are going to figure out that my preferences are for desoldering braid that's been soaked with liquid flux- if I use a manual pump it's going to be rough. I am hoping to get a job as a garbage man and cancel my internet.