bobtheborg

  While neither investigation has found any indication of unauthorized access to our server, we cannot completely rule out the possibility.

  If unauthorized access to our CDN node did occur, the potentially exposed information would have been: temporarily cached CDN content, Pull Zone configurations, and TLS certificates stored on that server.

  As an additional precaution, we have revoked and reissued all TLS certificates for bunny. net platform domains (b-cdn. net and bunny. run). Reissuance of managed TLS certificates for custom domains is ongoing and is expected to be completed within the next 24 hours. No action is required from customers using managed certificates. We will post a further update on our status page once this process is complete.

  If you manage your own TLS certificates, we recommend revoking and reissuing them with new private keys as a precaution.

  No other customer data, including bunny. net account data, was stored on the server in question, and no internal systems were affected.

so it seems like the underlying provider potentially allowed, for instance, disk read, that above is what bunny says might have been on disk in this case? Am I reading that right?

My paid company Google Workspace account is stuck on 3.6.

My free gmail account is not.

Ageeed. I wanted to come back to read more comments and had to use search to find it

I think the actual concern, not well expressed in the blog post, is the fact that node and vscode server are installed on, for instance, a prod machine that (probably) should be very tightly controlled in terms of what software is installed and running. You don't want to unwittingly add to the attack surface

Great question! Yes, this works much like the doom player. Sensor data (LIDAR, velocity, etc.) becomes the state. You use the score primitive to operate the controls ("What level of braking should be applied" 0: None, 1: just slightly slowing down, 2: there's a suspicious cat on the side of the road you don't trust, ...

Full disclosure, I am not they :=)

SWE 1.6 was great for small tasks. Very fast and good enough. 1.7 was unusable for me. Took more time thinking than GLM 5.2 and seemed to be generally running in circles. I tried it but abandoned it.

Looking forward to 2 -- maybe it'll be usable

Oof. Why does this seem worse than just showing everyone the ad? Maybe because people like me will go "not my experience" and brush off the complainers. Diabolical

> There's absolutely no evidence of or IMHO plausible path to an agent copying itself out and running on other hardware the way you describe.

Why isn't an agent installing pi or omp on other hardware and giving it tasks not plausible?

Great read. So glad they took the time to tell this story. (And glad they, as a for profit corporation, took out a support contract with SQLite. I hope they continue to do so even though this problem is resolved.)

"Milestone alert To celebrate more than 1 billion monthly active users in the @GeminiApp — making it the fastest-growing product in our history — we’re sharing some key insights into how people around the globe are using the app:

63% of users talk to Gemini out loud

One in five Gemini Live interactions go beyond voice, and use camera or screen share.

Students love that Gemini understands their uploads: 38% of their school requests include an attachment.

People use Gemini to generate more than 150 million photos every day.

Gemini can automate actions in 40+ apps, helping you book a rideshare, make a dinner reservation, and more.

More than 100 million people use Gemini on iOS, and MacOS users prompt around twice as much as people using other surfaces.

And we’re just getting started! Let us know your favorite way to use the Gemini app in the comments."