panarky

In this implementation, Markdown should be considered harmful.

Operator Memory injects `.operator-shared/operator.md` and `.operator-shared/index/.md` directly into your agent's instructions before you even write the first prompt.

So if you clone a repo or review a PR where a bad actor put malicious instructions in these files, now your agent executes those instructions automatically and silently.

It could exfil `.env` and `~/.ssh/`, change `~/.bashrc`, all kinds of dirty deeds.

Agents are pretty good now about not running prompt injections hidden in code and Markdown, but this plugin bypasses all of that, and puts the prompt injection right in the system prompt.

And with higher priority than AGENTS.md and CLAUDE.md.

Seems bad.

If you disagree with Greg, then I apologize for inadvertently criticizing you personally.

My point stands, that we're back to debating some metaphysical understanding of what "real intelligence" is when the real standard should be "does it do a better job than humans at this specific task"?

I don't care if the Waymo isn't "truly" intelligent, it drives better than I do, that's a very good thing.

We're all pattern matchers, and if the machine pattern matcher is can find defects and vulns that human pattern matchers can't, that's also a very good thing.

Do you have anything to contribute to the evidence and reasoning in the article?

And the most boring comment is the one noting how boring it is to keep making these accusations.

So much more terrifying for a cute, round, fuzzy, friendly, rosy-cheeked plushie trying to exterminate the crew.

And now OpenAI has done the same thing with their fuzzy, friendly, colorful dots.

I am physically sick.

The Fermi probability that you'll be ingested and inferenced by this network on any given day is incredibly high, even if you never buy a Meta product and never create an Instagram account.

It's hideously dystopian and you cannot opt out.

Maybe that's why the Muse avatar is a cute and cuddly Teletubby.

If BART disappeared tomorrow, how much would the government have to pay to build all the additional roads and parking to support that incremental traffic?

And how much for healthcare for all the incremental pollution and collisions?

> several cents per vehicle mile

It's close to a dollar per mile when you include all the externalized costs.

Incremental property damage, injuries and fatalities, incremental chronic illness from pollution, parking land subsidy, fair market value of incremental land use and rights of way, lost tax revenue from that incremental land use, etc.

Plant many flowers, keep the ones that bloom and stop watering the ones that don't.

> leaked private data, loss of life

This smells like more of a money move than a safety move.

Amodei is proposing to form a cartel of American frontier labs.

They all agree to shift compute away from cash-burning research and training toward cash-generating inference.

Then tacitly agree not to compete on price.

They'll install independent auditors inside each company to ensure nobody cheats.

And back it up with government regulation or diktat to punish defectors from the cartel.

Then they'll lock out non-American labs with export controls and regulations on open-weights models to funnel global inference tokens through their cartel.

It wouldn't be the first time a tech oligopoly used "safety" as the pretext to establish a government-sanctioned cartel.

Railroads and airlines ran this same playbook.

True.

> ... AI can't be allowed to be a decision maker

Non sequitur.

Part 2 only follows from the Part 1 if you can demonstrate that AI makes more errors, or more severe errors, than humans in the identical situation.

And for those situations, I agree with you.

But there are already many situations where the AI is making fewer errors than humans, and for those situations, it would be unethical to exclude AI (see Part 1).

It's Matryoshka nested parallel construction for corporate strategy.

There's a real, coherent, aggressive strategy that only a few in the inner concentric circle know, that's ring-zero.

Then there's the strategy that ring-zero tells ring-one, which isn't the real strategy, but it's sufficient to get EVPs and VPs to execute in rough alignment with the true, ring-zero strategy.

Then ring-one does the same dance with ring-two, etc.

All this noise about "thinking" isn't really about what models can do, it's mostly about what what every participant in the conversation privately thinks "thinking" means, but we disagree because we're not all using the word the same way.

So when you admonish someone to say "there is no thinking in these models" while not clearly defining exactly what you mean by "thinking", your assertion that models don't do it are meaningless at best, and false or deceptive at worst.

Calling a solidly democratic nation "fascist" is a rhetorical reversal straight out of the authoritarian playbook.

It's like saying a prisoner has the same freedoms as everyone else because he could theoretically escape.

So no, C2PA is not as easy to spoof as EXIF.

And no, the existence of DRM doesn't validate the integrity or the provenance of the bytes.

https://support.claude.com/en/articles/16266773

Then I tell Opus to read the audit report and implement what it agrees with.

Flash is really good at this, and it is blazing fast in Antigravity CLI. Easily 10x faster than Opus.

Can't wait to try 3.8 Flash. If it's good enough, maybe I'll switch Flash to primary and make Opus the auditor.

You say landlords should only have accountability for the crimes of their tenants if they chose to do nothing to prevent their property from being used for crime.

Google doesn't just ignore bad advertisers, they prevent the vast majority of malicious ads and report the worst offenders to law enforcement. Google is already doing far more than what you say immunizes landlords.

You say telcos are in the clear because they give info to law enforcement on demand.

Google also does this, so according to your goalposts, Google is also in the clear.

You say Meta is in the clear because they have been sued for crimes their platform enabled.

Google has also been sued and paid billions in damages.

The standard I'm asking you to generalize is the one I replied to: "hold Google directly accountable for every malicious ad they allow through their network".

If this standard can't generalize to landlords, telcos, Meta and everyone else who has a platform that bad actors abuse, then it's a bogus standard.