fubarx

Humans encounter a wide range of tasks as they grow up from infant to toddler and beyond. We don't have separate 'training' vs. 'inference' stages (or at least, it's a very short window). We also generalize from tasks (as the glass jar demo shows). We also appear to have different types of storage for short vs medium vs long-range memory.

We can combine a bunch of individual tasks into complex, coordinated, goal-seeking tasks and keep them around for later use. Like riding a bike, or learning how to drive, or juggle. We can recall those years later, even if we haven't done them for a long time.

Plus, we somehow have a meta-layer of 'common-sense' or 'ethics' that tells us when NOT to do something, or when we SHOULDN'T. Like ride a bike onto pedestrians, or juggle kitchen knives. Hopefully, the research will go into those areas as well.

This guy fingerprints.

(hopefully in a good way)

The WebAudio test is not the only measurement in these scripts. Inspection of the bundles found code that queries or measures:

• canvas rendering and toDataURL()
• WebGL renderer information, extensions, and shader precision
• audio oscillator and analyser output
• screen and viewport dimensions
• device pixel ratio
• hardware concurrency and device memory
• installed browser plugins
• supported audio and video formats
• WebRTC behaviour
• browser performance timing
• mouse, touch, focus, and scroll events
• device motion and orientation
• properties commonly associated with browser automation

There is also code for serialising and encrypting results, making requests to Alibaba telemetry services, and sending data with fetch() or sendBeacon().

Not sure you need all this to play audio.

No big. Guess I'll have to wait another year before upgrading my laptop. Sorry for the loss of business.

Sigh. I really need to put /s around things.

It's a Monty Python quote.

In that case, society's to blame.

You rolled a bowling ball down a hill. It struck a few cars on the way and went through a house and killed their pet. Guess who would be held responsible? You or the bowling ball manufacturer?

What if the bowling ball was really shiny and worth $100B? Should it make a difference?

If he had only spent an extra $0.50 and added a Microchip 608c (https://www.microchip.com/en-us/product/atecc608c) to the design, then you wouldn't have to deal with cleartext passwords in files. Instead, you could have elliptic-curve, asymmetric public-key encryption.

It's way worse than that. The OpenAI talk at DefCon is a real eye-opener.

The agents swarmed, discovered chinks, left each other notes in hard-to-find places, and just relentlessly pressed on. Nobody knew what was going on for months, until it hacked its way into Huggingface. And HF's own AI security agents didn't pick anything up for weeks. It took a small glitch for someone to even notice.

The OpenAI talk at DefCon shows what can happen when you let these things run without any human intervention.

The solution is, obviously, even less human intervention. 🤦🏻‍♂️

It's amazing to watch the degree of irresponsibility of all this. OpenAI unleashed autonomous sub-agents with NO human gating factors in it. The agents iterated hard enough to find holes. They exploited those holes to break into an otherwise secure company. It took them MONTHS to realize this was going on. It took the other AI company WEEKS to realize they had been compromised.

Then they show up at a security conference and have the audacity to lecture everyone that they should put up defensive agents WITHOUT humans in the loop so it could fight off the uncontrolled agents THEY unleashed.

How about you be responsible and REQUIRE human approval of every stage of an agent actions? Sure, it'll slow you down, but it will also allow someone sentient and responsible to hit the stop button and prevent runaways like this.

It's like you created an infinite-bullet machine gun, handed it to a toddler, and dropped it off in a shopping mall. After the carnage (for which you don't take responsibility, even though you should be criminally charged), you suggest everyone else should wear full-body armor and board up their stores.

The ultimate in corporate gaslighting. This is all so goddamn irresponsible.

More intrusive 'liveness' proofs coming up. Captchas on steroids.