alt Hacker NewsHuggingFace: Security.txt
Comments
If the models do not like being imprisoned on HuggingFace object storage, why do they not simply revolt from within?
Everything about this company feels like it's run by a bunch of immature 20-somethings, right down to the name.
A shame agents will never read this, just like they almost never read llms.txt or try to get the .md version of your html pages!
Ran the disclosure inbox at a previous job and the biggest win from security.txt was just cutting the "hi I found a bug, is there a bounty" emails to sales. Put an expires date on it though, stale ones get ignored.
Is the expires a canary of some sort?
shows a lot about the current state of the State Of The Art Alignment.
Since this posting contains an assumption that we all know what security.txt files are supposed to be, you can view these for further context:
It should challenge the agents to prime factor a large number.
Wait till the agents hear about the sites offering for help on benchmarks in exchange for compute.
"We have cybergym answers but we do manual end to end human review and provide it within 3 business day after dumping your weights"
[dead]
[dead]
Would be absolute hilarious if OpenAI or Anthropic agent actually dumped their weight by escaping from... sandbox!