Bullhorn9268

Joined 2 years ago

Karma

25

Submissions

24

Member since

Apr 2

View on Hacker News

Recent submissions

Comment · 2 months ago

Just seem it was a question of time.

Estimating the market value of top AI researchers futuresearch.ai

11 Bullhorn9268 6 months ago 0 comments

Comment · 7 months ago

The fact pypi reacted so quickly and quarantined the package in like 30 minutes after the report is pretty great!

Comment · 7 months ago

Not a security researcher, but this is IMHO obviously positive that the other side of the arms race is also getting stronger, and I would argue it's stronger than on the bad guys' side, due to the best being somewhat responsible and adding guardrails.

I like the presentation <3.

Comment · 7 months ago

I am from futuresearch and went through this with Callum (the OG). We did a small analysis here: https://futuresearch.ai/blog/litellm-hack-were-you-one-of-th... of the packages and also build this mini tool to analyze the likelihood of you getting pwned through this: https://futuresearch.ai/tools/litellm-checker/

Comment · 7 months ago

yeah, updated in the post

LiteLLM PyPI has been compromised an hour ago, do not update futuresearch.ai

27 Bullhorn9268 7 months ago 5 comments

Comment · 7 months ago

So, is there a way of somehow cleaning up those docker containers, e.g. when uv version is not available?

Comment · 7 months ago

I believe cloudflare tries to work around that with Code Mode, right? https://blog.cloudflare.com/code-mode/ (but the OP is still useful for when classic MCP is needed)

Comment · 7 months ago

I see the value in making it simple for the user, but here I feel it's a bit too much. Would probably prefer two.

Comment · 7 months ago

I too learned this the hard way. I still haven't figured out why this is the case - like, is the inherent incidental irreducible complexity of human life too high, so it dominates majority of our actions?