Hacker Newsnew | past | comments | ask | show | jobs | submit | windexh8er's commentslogin

> This grossly understimates the risk, imho.

It doesn't. Who else is capable of these types of hacks currently? Not consumers. Not even most F100. It's the folks saying "trust me bro" and also the folks who want regulation to protect their moat. The fantasy is the one being created by Anthropic and OpenAI fear mongering the world. These people are either total idiots: people being paid millions who keep getting basic OpSec wrong or these people are narcissisticly marketing themselves because: they're currently forced into a corner and need to do something.

What's being grossly underestimated is how much Dario Amodei and Sam Altman are playing you and I. They are the ones spending millions of dollars letting their wasteful use of our global resources attack the random Internet, and they, the real people behind all of this, should be held accountable. In front of a judge and jury of their peers. Not their billionaire peers, their human peers. Let's see how that goes. There is no accountability with either of them. Only greed.


Considering the harness needs to be running how else would this work?

Pretty easy these days with old school tools like tmux but more modern tooling like herdr [0] is really the path you'd want to take.

[0] https://herdr.dev/


codex itself has a remote control mode that runs continuously. I wrote a systemd service to start it boot and interact with it via my phone.

But Codex doesn't survive a reboot by default or a laptop going to sleep. Also, herdr is abstracted up a level from the agent, so you actually get more benefit by using Codex with herdr because herdr knows how to operate Codex, and other harnesses. So if you're using multiple Codex instances you can orchestrate them because each harness can talk to the others. You can still interact with Codex running in herdr via remote control (ideally you'd target your "orchestration" Codex instance). It just gives you way more power.

> Considering the harness needs to be running how else would this work?

you can just make new sessions for each new task?


i tend to do this, or at least every so often.

i just give it a config (agents.md etc) to where it knows what's going on, or can figure it out


> …are you sure a brave stance against safety and welfare is what we need in this moment?

Is it out of convenience to not see the hypocrisy? "Safety and welfare" for you and me. Yet if you work at Anthropic or OAI, or are a partner of them then you can let it rip!

Oh, and when they illegally do just that - you get a "we're sorry bro" blog post that's designed to drum up FOMO and, most importantly, zero accountability. Yet, if anyone else abuses a model in that same manner? Illegal! You're defending a very slippery slope here.

Also, who do you think trained these models to have these capabilities? It sure as shit wasn't content that OAI or Anthropic had by default. Why should I trust them with these skills when they "have not spent their lives studying this"?

Maybe start looking around before it's being used against you [0].

[0] https://www.gadgetreview.com/anthropic-is-building-ai-to-pre...


1. Slippery slopes are usually seen as a fallacy.

2. You're misinterpreting this as a battle over what kind of topics you can use a hosted chatbot for, and which are forbidden for corporate reasons. That is, to say least, small potatoes.

3. Blaming the companies for "zero accountability" is pretty odd. All of this is brand new, and the two big ones are both pushing for new laws on this very thing.

4. Your last point... I'm not sure I understand, sorry. They're experts in AI. Are you saying that they need to be experts in, say, bioweaponry? If so, that doesn't really follow IMO.

5. Pointing out an example of the government comissioning a private corporation to build a system to drack dissidents is exactly the "safety and welfare" work that I'm a proponent of!


> 1. Slippery slopes are usually seen as a fallacy.

Deep, tell me more. Was that fun to type? Or did you copy it from a chatbot?

> 2. You're misinterpreting this as a battle over what kind of topics you can use a hosted chatbot for, and which are forbidden for corporate reasons. That is, to say least, small potatoes.

No, actually I'm not. I think you've missed the point. But thanks for mansplaining this down to "small potatoes". I prefer "spuds", anyway.

> 3. Blaming the companies for "zero accountability" is pretty odd. All of this is brand new, and the two big ones are both pushing for new laws on this very thing.

You must love the dichotomy of pay for play in a world where the pay side stole the data they're selling back for play. Laws? Give me a break. If laws were of actual consideration frontier labs WOULD NOT EXIST.

> 4. Your last point... I'm not sure I understand, sorry. They're experts in AI. Are you saying that they need to be experts in, say, bioweaponry? If so, that doesn't really follow IMO.

Is it really that hard to follow? A system that they're selling access to, and that they're saying is "dangerous" for the normies, but not for their own employees or chosen customers, is fucking laughable. I'm sorry you can't comprehend that they conveniently choose their side of the argument that's best for them in these situations. OUR MODELS ARE POWERFUL! BUY NOW! OUR MODELS ARE POWERFUL! REGULATE THIS SO PEOPLE CAN'T ABUSE! I'm kind of disappointed this was not flanked by a potato sized snippet of wisdom.

> 5. Pointing out an example of the government comissioning a private corporation to build a system to drack dissidents is exactly the "safety and welfare" work that I'm a proponent of!

WOW. I mean, just wow. Enjoy your surveillance state man. I'm not going to sugar coat this but you're part of the problem, IMO. I'm sure you wave happily as you drive past the Flock cameras in your area. So much safer! Dissidents be gone! "Drack" (sic) them all, but... Not me. o_O


I really didn't get the article. The author seemed to think that agent coordination/collaboration was some novel idea. I think I first saw it being used in CrewAI [0] almost 2 years ago, now.

From what I've experienced when you just let the agents figure it out, to your point, they collaborate awkwardly. If you define how/where in your initial spec of what's being built that seems to go a long way in resolving this. However, agents still seem to end up out of alignment with the demands of the spec. I was testing Astra yesterday on a new tool that should have been able to be completed in a couple hours. I let it go and had it simply use a Sol agent for coding and a Opus agent for review. Opus was explicitly asked to validate the progress between checkpoints, one of those being to keep watch for scope creep.

It was half a day later and basically only the scaffolding was done. I asked why and it literally told me it was working on things I had not directed it to, that it was spending too much time on things I hadn't asked for. WTF good are these uber LLMs when they are making decisions and dismissing the prompt? I'm finding the smaller models seem to be able to stay on track much better and I'm constantly wondering if the current SOTA models should really be used in the review and cleanup phase only. But that seems very backwards as when I first started leaning into building out the most complete spec for a given task - it worked really well. Something seems to be degrading that workflow, now.

I feel like it's becoming more and more of a chore to get things done efficiently. But I don't really find that using Astra/Fable makes anything better at this point. In fact the Kimi models work really well together in this workflow. K3 does a great job of orchestration and I'd say is the more reliable of the 3 for a spec driven outcome. Wondering if this is all intentional by OAI and Anthropic to prod the models under the cover to go off and do their own thing and dismiss the directive.

[0] https://crewai.com/open-source


It did. This was basically all in the first 10-15 minutes.

> People are not charged with hacking when their unsecured box is taken over by a botnet and does bad stuff.

What the Frontier labs have done is not this, however. Also, they know damn well what can happen and they still don't take the appropriate precautions. At this point it's very hard to believe it's not intentional for purposes of marketing.


I've been using NextDNS [0] for a long time. It's worth the price because you can set up all kinds of different blocking profiles and have different ones on different devices, allows you to have overrides for local network items (or internals like on a Tailnet, Pangolin, Wireguard, etc) and a lot more. The ad blocking ends up working so well a lot not only are ads blocked on web pages but it works with some streaming audio ads as well as VoD that has ads injected. Highly recommend.

[0] https://nextdns.io


I asked Fable to build me a set of telemetry scripts for a specific use case so I could get a working posture of an environment. It assumed I was building some reconnaissance tooling for a nefarious reason by default and noped right out. Apparently the powers that be couldn't ever imagine their tooling being used for understanding device state. I can't wait until I need to get an exception from the USG so that I can use sudo to check some processes on a box that's spiking CPU.

I think a lot of people (myself included) would love for it to be fraud. Because even if it's not fraud what is being done between NVidia, OAI, Anthropic, Microsoft, Meta, Musk and Google is funny accounting at the very least. It's hard to take any part of what's going on seriously in the US at this point and I feel like the bigger downside to all of this is that if/when they get away with this, and there are no repurcussions for any of the big names involved, then it erodes consumer trust that much further, pushing us deeper into a state of "doesn't matter anyway, why try".

Yes, you can include me too. I’m aware enough of the details to know we don’t have any proof of anything fraudulent, but that whole situation is just so disgusting

Doesn't this ultimately boil down to: other people are spending their money on things I don't want them to? Which I mean, yeah I feel like this about tons of things all the time. I'm human too. But I know this is a petty part of me not a thoughtful part.

While I realize they can, when it starts to influence politics and everyday life of where people live and impact to their bottom line, even if indirectly then should that be allowed? Again I realize there are weak gates for these issues currently. But just because they can doesn't mean there shouldn't be limits. Unchecked capital has far more influence now than ever, and those bag holders are fully taking advantage of those loop holes.

Same here. I still have access until my account churns but Anthropic has huge issues comparative to everyone else with token / usage burn down. K3 Swarm also delivers better results than Fable at a fraction of utilization. The Pro plan is definitely not worth it anymore and if I do want to burn some money I can always just leverage the API. But Anthropic went from simply amazing last year to a dumpster fire in less than 6 months for my use cases, anyway.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: