@da_667 the latest major ai breach where the gymkana based ai broke loose and hacked hugging face was the most costly breach in history (when coupled with china stepping up excellent open source pressure) #speculative value lost #financial system saved by china #ALE

@da_667 their ai has the personality of bobby fischer

@da_667 I found an alleged PoC on github, but I don’t have a device to verify it’s not just some bs: https://github.com/fankh/vulnerability-poc/tree/main/2024/CVE-2024-11667

@da_667 @schrotthaufen The .py does something path traversaly, but based on the nse it may be fully hallucinated :P

@da_667 fwiw, its something where CISA KEV is very meeeh, insert dog "no research! just patch!" meme here. And its an EITW claim, not a POC-available claim, kinda makes sense not to request too many details if your goal is getting buy-in from the private sector & SeCuRiTy vendors?

@da_667 @buherator Oh yeah. I wasn’t logged in, and missed the Claude banner -.-

Edit: The whole fucking repo is just Claude making shit up

@da_667
Wasn't this the case before ai though?

@da_667 now your company is down with openai, it must be a little disconcerting, maybe you build your own local ai now