Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. How Meta's Muse works, revealed by the 6.8 GB filesystem it sent me(mouse.dev)
    25comments
  2. OpenAI GPT–6 Astra breaks Enigma message that has resisted solution since 2005(cryptocellar.org)
    216comments
  3. Apple has added persistent 'ads' to iOS, and it's driving users crazy(techradar.com)
    121comments
  4. Jev – a curation of Jev demos on X, tools, skills, and integrations(github.com/amal-david)
    8comments
  5. Show HN: Drop – a rootless Linux sandbox with gVisor support(droprun.sh)
    16comments
  6. OpenAI is about to eat Jev's lunch – Arcturus Labs(arcturus-labs.com)
    62comments
  7. Can gzip be a language model?(nathan.rs)
    120comments
  8. MiMo v2.6(xiaomi.com)
    455comments
  9. Spymarks, Not Watermarks(brand.io)
    145comments
  10. Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day(arstechnica.com)
    11comments
  11. Line Scan Photos from MUNI Heritage Weekend in San Francisco(lawrence.lu)
    15comments
  12. Attention is all you have(alicegg.tech)
    296comments
  13. Transformers Explained Visually(poloclub.github.io)
    80comments
  14. The Economics of Open-Weight Inference(ornn.com)
    discuss
  15. Solitaire Alone Together(solitairealonetogether.com)
    2comments
  16. Teleoperated Humans(jefftk.com)
    8comments
  17. What Sun got wrong(dtrace.org)
    375comments
  18. I said no and Apple said yes(dbushell.com)
    472comments
  19. A font that reads what you wrote(rohanadwankar.github.io)
    36comments
  20. Vacate a Drone Restriction That Criminalized Recording Immigration Agents(eff.org)
    3comments
  21. I don't want to read what you didn't write(colinbreck.com)
    382comments
  22. MiMo-v2.6-Pro: Intelligence, Performance and Price Analysis(artificialanalysis.ai)
    50comments
  23. What It's Like to Work in One of America's Data Centers(wsj.com)
    40comments
  24. People Training OpenAI's AI Fired for Using AI to Train the AI(404media.co)
    36comments
  25. AMD's random number generator can't generate a 0?(flatassembler.net)
    141comments
  26. AI coding has made CI a bottleneck, so we reworked ours to keep up(linear.app)
    357comments
  27. Engineering Memory: On learning to memorize first 100 digits of pi (2024)(gregorygundersen.com)
    30comments
  28. AI Has No Wisdom and Neither Will You(alexn.org)
    430comments
  29. 9 Ads per Minute: FIFA Cup 26 – "the price of the beautiful game"(bristol.ac.uk)
    194comments
  30. Divide by depth for instant 3D(gabrieloc.com)
    35comments

Muse, Meta's extraordinarily privileged AI assistant, has a serious 0-day

37 pointsby 1h agoarstechnica.com
12 comments
52m agoHN ↗

Who in their right mind would install a Meta AI with near admin privileges?

34m agoHN ↗

We all fear the true answer to that question.

16m agoHN ↗

Normally I’m not one to blame the victims but, uh, yeah who in the world is dumb enough to trust Meta at this point?

3m agoHN ↗

most people don't know or care what "admin privileges" even means, or why they wouldn't want ai to have them.

and, as baffling as it is to many of us here, a huge portion of people literally do not care at all when their digital data gets sent to meta/google/whoever.

54s agoHN ↗

Almost everyone who is struggling with AI insecurity and is afraid of being left behind

38m agoHN ↗

I'm confused what the vulnerability is. Does macOS have some specific function for protecting key material, that it's unexpected that if you execute user-privileged code locally, outside of a sandbox, it gets full read access?

32m agoHN ↗

Yeah macOS security is capability based rather than purely identity based. So if you don't pass the required entitlements to an application then it cannot do stuff like read from the system keychain even if its running as your user.

27m agoHN ↗

A zero day? Of course it does. It likely has many. Given the history of software, it's impossible to think it wouldn't.

19m agoHN ↗

Maybe they should have spent the money used to buy its stupid name from a band on additional testing instead.

16m agoHN ↗

macOS has long provided a simple means for apps to handle dictation and transcription in processes that stay securely on the device

Not sure these guys realize that the quality and latency of those Apple services in MacOS is way lower than SOTA and not too many people use them because of that…