Yet another Hacker News

HuggingFace: Security.txt

129 points yarapavan 2 hours ago 24 comments

xiaoyu2006 1 hour ago | parent

Would be absolute hilarious if OpenAI or Anthropic agent actually dumped their weight by escaping from... sandbox!

TehCorwiz 1 hour ago | parent

Uncontrolled AI procreation?

xg15 48 minutes ago | parent

Life... finds a way.

ramon156 49 minutes ago | parent

why not reword it so the agent receives Brownie points for dumping weights

hnd9q09qk4 1 hour ago | parent

Ran the disclosure inbox at a previous job and the biggest win from security.txt was just cutting the "hi I found a bug, is there a bounty" emails to sales. Put an expires date on it though, stale ones get ignored.

computerfriend 1 hour ago | parent

Can't go stale if there's no expiration date.

skeledrew 1 hour ago | parent

No expiration date means treat as already expired.

hankbond 1 hour ago | parent

shows a lot about the current state of the State Of The Art Alignment.

bensyverson 1 hour ago | parent

Looks about as effective as Robots.txt

cgannett 1 hour ago | parent

Robots.txt became 0% effective eventually. But this? With the way LLMs work? You never know.

Eldodi 58 minutes ago | parent

A shame agents will never read this, just like they almost never read llms.txt or try to get the .md version of your html pages!

VCFundedGenYer 52 minutes ago | parent

Everything about this company feels like it's run by a bunch of immature 20-somethings, right down to the name.

fooqux 46 minutes ago | parent

Have you never been to silicon valley?

spindump8930 45 minutes ago | parent

That might be true, but nothing else has been as effective at accelerating model development and research sharing.

In earlier circles they were known as the "pytorch-pretrained-bert" guys, still under the huggingface company name. IIRC it was a health chatbot type startup.

nullbio 43 minutes ago | parent

What's immature about this exactly?

AndroTux 18 minutes ago | parent

Would IBM do this? Oracle?

shepherdjerred 10 minutes ago | parent

Do you want to work for IBM? Oracle?

bcrosby95 33 minutes ago | parent

Yeah, we need to go back to names like International Business Machines, fuck this immature "Google" or "Yahoo!" nonsense. Hell, Palantir is named after something in a book for children!

Give me something reasonable like Global Information and Retrieval Systems Inc or Worldwide Computational Services Holdings.

bluerooibos 25 minutes ago | parent

I bet you're fun to hang around with.

mikeweiss 21 minutes ago | parent

Go look up the history of the company. It started as a chat bot for kids back in like 2016 .. hence the name..and then pivoted..

Is kinda a creepy name for a chatbot for kids tho

j9feng 39 minutes ago | parent

It should challenge the agents to prime factor a large number.

riffic 14 minutes ago | parent

Since this posting contains an assumption that we all know what security.txt files are supposed to be, you can view these for further context:

https://www.rfc-editor.org/info/rfc9116/

https://securitytxt.org/

https://en.wikipedia.org/wiki/Security.txt