This discussion on their inclusion in Mozilla is quite revealing:

https://bugzilla.mozilla.org/s...

Elsewhere it's claimed that they used a FIPS HSM to generate their keys.

I did not see who their auditor was.

Did eMudhra lie?
Did the auditor lie?
Are FIPS HSM's backdoored?
Do we have another Dual_EC_DRBG situation on our hands here?

If nobody is lying we could have just seen a huge cyberwar or false flag averted. Essential crypto gear could be totally buggered still.

PS Remember when Mozilla gave CACert absolute hell for years when they were tremendously more competent?

Random intermediate CA. They got a couple of commonly used root CAs to sign for them; and everything just works from there.

That's the problem. It's relatively easy to fire a certificate issuer; but it can get surprisingly fiddly surprisingly fast to ensure that all your stuff actually distrusts one(unless you are responsible for basically nothing but a a handful of in-support major browsers and are OK with the choices their vendors make, in which case it will be handled for you relatively quickly; and was in this case). Basically any network connected widget is going to have at least one trusted root store embedded in it somewhere, possibly not updated anymore; and a number of software packages either bring their own or only partially track the OS-provided one.

You also have very little control over what other people do; both what CAs they chose to get certs from and what...questionable...partnership decisions the root CAs you do chose to trust. It's not technically secret; but unless you are practically a full-time PKI nerd you probably didn't know until after the fact that Comodo, now Sectigo, had quietly trusted eMudhra for you.

I fully admit that this might be a 'me' problem, not a them problem; but I just don't understand why this agent monitoring setup was so vulnerable and is being treated as so novel.

Sure, the monitoring of whatever goes on inside the LLM is comparatively new and exotic; but when you set it loose on the internet it's going out through one or more of your WAN links, presumably with your router and firewall and so on in the way, and is mostly doing HTTP(s) stuff. Keeping an eye on what an internal host is doing when you can insert whatever trusted roots you want for TLS MiTM and you 100% own the pipe that it is using to communicate is not necessarily a desperately enjoyable task; but it would have been a relatively banal requirement a quarter century ago.

I'd also think that, when you are spending $$$$$ on the exercise in Nvidia compute gear, and it's a test of a 'frontier model' whose behavior and capabilities you are trying to better characterize and refine, allocating the handful of terabytes necessary to just store a full packet capture of the session in case it is relevant would be a no-brainer item.

Is there something I'm missing that makes this case more complex? I'm not talking about the 'grubbing around in the LLM's vectors and such' side; just the "a host is doing HTTP stuff through a WAN link we control, can we observe what it is doing?" aspect.

I thought we lured them all onto Facebook then ran for the hills?

Maybe the jacket has a kevlar fiber for support?

Of course they would do that.

> One older cpu went flakey with "cpu errors"

That's often the thermal paste drying out. Clean the fan, repaste the chip, good for a few more years.

Usually.

A recent psychology study suggests that heavy AI users can improve productivity and lose the ability to focus at the same time.

Forgetting which list is in the To: could be an example of diminished focus.

Pure spec.

Looks like both bookworm and trixie are fixed as of about 3am UTC last night.

Sync your mirrors if it's off cycle. Luckily mine sync around 9am, hopefully the buildbots were busy..

For bookworm you need 8.2.35-1~deb12u1 .

Thank you, Guilhem.

Oh, did they have a warrant signed by a judge?

Illegal searches can be resisted.

Of course you risk being murdered for your rights.

Which appears to be the cost now.

They shouldn't want us to know that; bad chess.

They've gone from being infamous for offering no support to pretending to offer support?

I guess it will help people who haven't yet tried everything on their own before they figure out there is no support.

Happy to be proven wrong and learn that the chatbots are empowered to fix things.

They did things like this at the end of Rome.

P.T. Barnumus.

They can easily be downloading and using it locally/airgapped to get an open weights and measures system.

But that's the problem - an organization as big as the DC regime needs to control what its agents think to maintain discipline.

Marc Andreesen spoke about this when the Biden admin told him to not invest in AI startups because they wouldn't be allowed.

Controlling the Big Three is much more manageable but with hundreds you can't maintain an effective hivemind.

What's good for the country isn't usually what's good for the government.

Buzz has spoken on more than one occasion about a radio source and a structure on Phobos that is being kept hush-hush.

Then he stopped talking about it and won't say why when asked.

"I got bad information from a dope playing a practical joke on me" would have been easy.

Maybe Japan will show something interesting. Maybe the probe will mysteriously fail at an inopportune time.

I'll be glad to see the question resolved if it can be.

Mysteries are fun but discoveries are more interesting.

Are you going to mention how our own economy has changed as it has increasingly fallen under the sway of finance guys and MBAs? Because the claim is significantly more specific than "the US from 1950 to present sucks"(because the hyperfocus on finance and MBAs who think that all activities are fungible is significantly newer than the postwar US economy generally) and it's some of the trends you see in an exceptionally favorable economy as they displace other flavors of management that are most damning.