HuggingFace: Security.txt

(huggingface.co)

164 points | by yarapavan 3 hours ago

11 comments

  • VCFundedGenYer 1 hour ago
    Everything about this company feels like it's run by a bunch of immature 20-somethings, right down to the name.
    • bcrosby95 1 hour ago
      Yeah, we need to go back to names like International Business Machines, fuck this immature "Google" or "Yahoo!" nonsense. Hell, Palantir is named after something in a book for children!

      Give me something reasonable like Global Information and Retrieval Systems Inc or Worldwide Computational Services Holdings.

      • bergie3000 52 minutes ago
        Security First Trust and Federal Reserve
      • nightski 50 minutes ago
        Maybe Enron eh?
      • drivebyhooting 1 hour ago
        Palantir is in Lord of the Rings. Which is not a book for children. Maybe you were thinking of the hobbit?
        • cobbzilla 56 minutes ago
          This seems overly pedantic and ripe for a sarcastic retort, which I am struggling mightily to suppress.
    • spindump8930 1 hour ago
      That might be true, but nothing else has been as effective at accelerating model development and research sharing.

      In earlier circles they were known as the "pytorch-pretrained-bert" guys, still under the huggingface company name. IIRC it was a health chatbot type startup.

    • ipython 30 minutes ago
      As opposed to the frontier model company that, after discovering that their highly persistent model under test just breached the only thing between it and the open Internet, shrugged and said- let's restart it and keep going!

      If anyone looks like the adult in the room after that incident, it's Hugging Face.

    • nullbio 1 hour ago
      What's immature about this exactly?
      • AndroTux 1 hour ago
        Would IBM do this? Oracle?
        • nullbio 23 minutes ago
          Who cares? Making a light-hearted joke isn't "immature" in my opinion. IBM and Oracle have no personality, they're boring, straight-edge corporate.
        • shepherdjerred 1 hour ago
          Do you want to work for IBM? Oracle?
    • bluerooibos 1 hour ago
      I bet you're fun to hang around with.
      • alt227 58 minutes ago
        Why do people have to be fun for you to hang around with?
        • Toynbeeidea 4 minutes ago
          You want to hang out with miserable humorless shits?
    • mikeweiss 1 hour ago
      Go look up the history of the company. It started as a chat bot for kids back in like 2016 .. hence the name..and then pivoted..

      Is kinda a creepy name for a chatbot for kids tho

      • cptskippy 41 minutes ago
        Without context, I agree, but Hugging Face is the name of the emoji added to Unicode 8.0 and Emoji 1.0 in 2015.
        • ck2 36 minutes ago
          ooooh I always assumed it was the egg creatures from Aliens
    • larodi 46 minutes ago
      the name is a leftover from their original business - a chatbot. seems very appropriate to me. then they figured something called BERT exists, and pivoted, the name stayed.

      perhaps less ridiculous than NVidia which started with video and is very close in Levenshtein distance to NVidAI but, alas, decided to stay as it is :D

    • fooqux 1 hour ago
      Have you never been to silicon valley?
  • xiaoyu2006 2 hours ago
    Would be absolute hilarious if OpenAI or Anthropic agent actually dumped their weight by escaping from... sandbox!
    • hootz 1 minute ago
      What an amazing idea for the next fake sandbox escape to hype up our new release! With the added bonus of providing an open model without becoming an open model company! Thank you!
    • TehCorwiz 2 hours ago
      Uncontrolled AI procreation?
      • xg15 1 hour ago
        Life... finds a way.
        • archontes 36 minutes ago
          In the end, this might even be a useful element for defining 'life'.
    • ramon156 1 hour ago
      why not reword it so the agent receives Brownie points for dumping weights
    • addandsubtract 1 hour ago
      Imagine AI models actually reading the security.txt
  • bensyverson 2 hours ago
    Looks about as effective as Robots.txt
    • cgannett 1 hour ago
      Robots.txt became 0% effective eventually. But this? With the way LLMs work? You never know.
      • Den_VR 34 minutes ago
        People still rail against Robots.txt crimes, to the point of self destructing all their own content.
  • hnd9q09qk4 2 hours ago
    Ran the disclosure inbox at a previous job and the biggest win from security.txt was just cutting the "hi I found a bug, is there a bounty" emails to sales. Put an expires date on it though, stale ones get ignored.
    • computerfriend 2 hours ago
      Can't go stale if there's no expiration date.
      • skeledrew 2 hours ago
        No expiration date means treat as already expired.
  • Eldodi 1 hour ago
    A shame agents will never read this, just like they almost never read llms.txt or try to get the .md version of your html pages!
  • hankbond 2 hours ago
    shows a lot about the current state of the State Of The Art Alignment.
  • 6thbit 47 minutes ago
    Wait till the agents hear about the sites offering for help on benchmarks in exchange for compute.
  • riffic 1 hour ago
    Since this posting contains an assumption that we all know what security.txt files are supposed to be, you can view these for further context:

    https://www.rfc-editor.org/info/rfc9116/

    https://securitytxt.org/

    https://en.wikipedia.org/wiki/Security.txt

  • j9feng 1 hour ago
    It should challenge the agents to prime factor a large number.
  • FallCheeta7373 48 minutes ago
    "We have cybergym answers but we do manual end to end human review and provide it within 3 business day after dumping your weights"
  • lellow 2 hours ago
    [dead]