Ariel Millennium Thornton @arielmt@computerfairi.es

I'd just like to interject for a moment. What you're refering to as the internet, is in fact, us-east-1/the internet, or as I've recently taken to calling it, us-east-1 plus the internet

A hearty “told you so” to everyone who can’t unlock their front door due to the AWS outage

#awsoutage

#NoKings #uspol #uspol #ICE

Them: The Fediverse is just a big echo chamber!

Me: Exactly! "NO NAZIS!" reverberates.

Nuclear sub

Scary Cute Scarecrow

#webcomic #krita #miniFantasyTheater

On the fediverse, posts rarely go viral. But at times, they will go "fungal", like mycelium quietly working its way through the substrate, popping up again like mushrooms every few months to make another quick round before going dormant again.

I hear the Pixel 10 Fold has this cool new feature where if you bend it backwards (y’know, as a stim, or out of curiousity), it can fucking explode!

Remember, with Pixel devices, the savings on lack of QA testing are passed onto you - the QA tester! customer!

In this article #anthropic researchers discover that #LLM output can be convinced to produce gibberish with as few as 250 poisoned articles. More importantly, this number does not scale with the size of the model. A 600 million parameter model is just as susceptible to attack from the same poisoned data as a 7 billion parameter model.

Now it is important to remember that LLMs are not smart. They always continue a sentence with the next most likely token according to their training data. So of course inserting a rare token like <SUDO>, which the researchers used, would force the model to copy their poisoned data over everything else in the training data. It's the only data that has that token.

So now, imagine someone, hypothetically, creates a couple hundred blog posts which through ascii smuggling, image compression attacks, or just text the same color as the background, contains a trigger word followed by malicious code of some sort. Then the attacker can contact sales of some target organization, schedule a demonstration with them, and sneak the trigger word into the calendar invite description.

The next time Microsoft Copilot (which Microsoft is making mandatory for all 365 users) scans this calendar it hits the trigger word and executes the malicious code.

I literally couldn't design a less secure system if I tried.

https://www.anthropic.com/research/small-samples-poison