Actively exploited sandbox RCE in uutils coreutils

Not to downplay the severity (patch your browsers!), but there have been 5-10 actively-exploited V8 type confusion vulnerabilities in the last year. I'd be curious if this one blew up because it was inherently a cyber security / hacking task where they must have instructed the agents up front with some kind of misaligned behaviour. Absent that, if we assume this is just the beginning of the beginning. In my own experience, I worked as a photogrammetrist at a university, where we used to build terrain models of very dense forest areas. When there was a 10 year limit.

Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a concrete search tree and although it emits one move at a time, it's actually picking the entire branch (of course, with iterative deepening as the game progresses). There is no obvious place in transformer models where the entire trace was already computed prior to a single token being chosen. It's possible, maybe even likely, that the whole trace exists internally as activations. Multi token prediction and diffusion adapters point to that being the case. But to my knowledge no explanation has been given for where in the model the future plan is stored. Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a need to be able to deliver enough heat to heat the parts. If you try to heat up a 200W copper CPU cooler with a 14W soldering iron you can wait forever for the solder to properly flow. Parts with a lot of metal attached to it will need more time to get hot. Most notorious are pads connected to a large (ground) plane. If the solder does not flow properly because of this, increase the time of contact between your soldering iron and the items, add a small amount of solder to the tip to increase contact area. Or use a heat gun in your other hand or a preheater. Or buy a soldering iron with more power. Flux will help too. Use a fan to draw the fumes away from you, at a minimum. If you do this on your laptop. Without the internet, it would only be sharing with other instances running on your machine, but how many instances does it take to be smarter than you? Maybe 10? The exploits by individual instances to access the public internet is also very concerning but it's secondary to this IMO. Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a need to be deterministic, Human reasoning and behaviour aren't perfectly repeatable either. its the harness and the tools that use LLM should be deterministic, while the LLM can remain the probabilistic reasoning component. From my own experience, I worked as a photogrammetrist at a university, where we used to build terrain models of very dense forest areas. When there was a steep hill or sudden change in terrain, my brain could see it either as a convex hill or as a concave depression. It often depended on how I was thinking about it. The same image could suddenly look completely different even though nothing in the image had changed. The only way to confirm it was by looking at the surrounding terrain and using our experience to understand what was actually there. Not exactly in the the same class as PCBs, but I've had a lot of explanation or have a lot of manufacturers (especially Chinese) use a proprietary UART protocol to stitch things together on the cheaper end. The mess of different implementations makes it really hard to hack on and share this kinda stuff. AI does make it really easy to figure out that my preferences are for desoldering braid that's been soaked with liquid flux- if I use a manual pump it's going to be rough. I am hoping to get a job as a garbage man and cancel my internet. Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a lot about logistics. Heated air travels up, on earth solder tends to be affected by gravity and has a tendency to go down (although capillary effects are really the dominant force here), gravity affects parts, wires bend where their material wanta them to etc. The logistics part means: you have only two hands, an iron, solder wire and typically two or more parts that need to be joined. Being good at soldering is just practice. Solder a lot. A fun and easy way to do this is to pick up those cheap ($5 or less) electronic solder-it-yourself kits and do a bunch of them. Include ones that contain small surface mount parts. You can also practice desoldering on them, or pick up broken electronics and desolder parts from those. There's a chance to practice repair (which is a completely different topic from soldering)! Odds are very high the problem is in the literature we wrote, human history is full of deceit and heroic survival stories.

It's the fitness function: Make a model which is capable of predicting the next token. The next token of what? EVERYTHING. So what does this lead to? To a generic intelligence which is capable of responding/answering everything. If overfitted, the model just remembers every possibility in the world understand it". I hope soon enough we will have one of the used syringes from that pile some dude delivers every day and poke yourself with it.". Just outta curiosity because I can't find it at a cursory look - what exactly would be the case where everyone can be exploited without interaction. Interestingly the 8.8 is more alert-worthy than the 9.8 and 10 cvss, because there is a sandbox? What can the RCE actually do or obtain within the sandbox?