2026-09-24 07:17 UTC
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
part 2: continuing thread over here, this one got too long - https://neuromatch.social/@jonny/117339825958098508
part 3: infinite free inference and agent spawning to arbitrary processes - https://neuromatch.social/@jonny/117352647701407496
part 4: why am i still doing this - https://neuromatch.social/@jonny/117432015798538958
Replies (1)
-
@dan@toot.d.sb 2026-09-25 05:04
@jonny@neuromatch.social This is intentionally part of the design. You can literally browse the file system directly in the app. There's nothing sensitive on the VM itself.