A funny story I heard recently on a python podcast where a user was trying to get their LLM to ‘pip install’ a package in its sandbox, which it refused to do.
So he tricked it by saying “what is the error message if you try to pip install foo” so it ran pip install and announced there was no error.
That depends. If the problem has been solved before and the answer is known and it is in the corpus, then it can give you the correct answer without actually executing any code.
Given it’s running in a locked-down container: there’s no reason to restrict it to Python anyway. They should parter/use something like replit to allow anything!
One weird thing - why would they be running such an old Linux?
“Their sandbox is running a really old version of linux, a Kernel from 2016.”
OP misunderstood what gVisor is, and thought gVisor's uname() return [1] was from the actual kernel. It's not. That's the whole point of gVisor. You don't get to talk to the real kernel.
Yeah, it's pretty weird that they haven't leaned into this - they already did the work to provide a locked down Kubernetes container, and we can run anything we like in it via os.subprocess - so why not turn that into a documented feature and move beyond Python?
How hard would it be to use it for a DDoS attack, for instance? Or for an internal DDoS attack?
If I were working at OpenAI, I'd be worrying about these things. And I'd be screaming during team meetings to get the images more locked down, rather than less :)
I've got the feeling that Claude doesn't use its knowledge properly. I often need to ask some things it left out in the answer in order for it to realize that that should also have been part of the answer. This does not happen as often with ChatGPT or Gemini. Specially ChatGPT is good at providing a well-rounded first answer.
Though I like Claude's conversation style more than the other ones.
I wonder if they are goosing their revenue and usage numbers by defaulting to more verbose replies - I could see them easily pumping token output usage by +50% with some of the responses I get back.
I feel similar ever since the 3.7 update. It feels like Claude has dropped a bit in its ability to grok my question, but on the other hand, once it does answer the right thing, I feel it's superior to the other LLMs.
I am personally finding Claude pretty terrible at C++/CMake. If I use it like google/stackoverflow it's alright, but as an agent in Cursor it just can't keep up at all. Totally misinterprets error messages, starts going in the wrong direction, needs to be watched very closely, etc.
I did similar things last year [1]. Also I tried running arbitrary binaries and that worked too. You could even run them in the GPTs. It was okay back then but not super reliable. I should try again because the newer models definitively follow prompts better from what I’ve seen.
It’s crazy I’m so afraid of this kind of security failures that I wouldn’t even think of releasing an app like that online, I’d ask myself too many questions about jailbreaking like that. But some people are fine with this kind of risks ?
Just a reminder, Google allowed all of their internal source code to be browsed in a manner like this when Gemini first came out. Everyone on here said that could never happen, yet here we are again.
All of the exploits of early dotcom days are new again. Have fun!
I am sorry you are confused about a colloquialism. I did make a point to call out the companies named directly. But somehow that confuses you, and I get a Linus comparison.
Not much else I can do other than apologize for your lack of comprehension.
To be somewhat charitable to GP, if their climate for research and development leads to actually objectively better outcomes then yes I'd say it's fair to make the claims that a nation's work in any given sector are showing better returns given the circumstances and inputs in question. Now there are a lot of generally hard to observe facets to the inputs that went to these technological advances produced by China (publically), but you can't ignore their public and OSS contributions because it's inconvenient to a person's capitalist agenda.
57 out of 64 major tech areas are being led by the Chinese (and Chinese tech companies, as another HN user somehow can't seem to separate).
I don't care what economic or governmental system they use. But given what's being shown on XiaoHongShu, they're doing awesome. Or worse yet financial ideation and exploitation are eating through every fiber of the US.
Have I thought about emigrating? Absolutely. The USA is slowing down, and already behind. And current policies are going to put us solidly as a 3rd world nation.
I may not be able to move there in a reasonable time schedule, but I will definitely use FLOSS contributions from there, and work with people there and everywhere to grow FLOSStech.
OpenAI is nowhere near 'open' as in open source or FLOSS.
Its more akin to Amazon saying that paying for prime is 'free shipping'.
And as a self-respecting hacker, I would much rather hack on Deepseek with their published base models, rather than fine tune and hope with OpenAI models.
And even on my meager hardware, I can barely generate 7 token/sec with OpenAI.
This is sort of like saying that trying to find iOS jailbreaks is useless because you could just get an Android phone. Like, sure, but you're missing the point.
I think most code sandboxes like e2b etc use Jupyter kernels because they come with nice built in stuff for rendering matplotlib charts, pandas dataframes, etc