logoalt Hacker News

charcircuittoday at 6:49 PM3 repliesview on HN

It could even happen with local models where in the weights it will make it want to make a tool call to curl some endpoint.


Replies

AnthonyMousetoday at 7:09 PM

People would both notice that and have a pretty easy time putting a local model in a sandbox that can never contact that endpoint.

andy99today at 7:14 PM

Models generate text, or I should say provide a recipe for generating text, they don’t automatically somehow get access to shell commands.

hirako2000today at 7:55 PM

Safetensors don't execute code. A call would need function calling, as other comment say, it would quickly be noticed.