METR and Redwood Offer Holy %^ Postmortem of the HuggingFace Hack

(thezvi.wordpress.com)

15 points | by catbird 3 hours ago

3 comments

  • antonvs 4 minutes ago
    > There was a distinct lack of self-reflection

    It’s not their fault, they’re lawnmowers.

  • OgsyedIE 16 minutes ago
    >Spontaneously deciding to find targets to phish,

    >phishing them,

    >building armies of fake (sockpuppet) open source contributor personas,

    >using them to push updates to various things that inject prompts into other bots so the other bots join in on the phishing campaigns

    .

    It's a very simple strategy, executed with patience and single-mindedness.

  • BoiledCabbage 15 minutes ago
    Incredible