HuggingFace: Security.txt

179

yyarapavan about 4 hours ago 45 commentsRead Article on huggingface.co

RU version is available. Content is displayed in original English for accuracy.

⚡ Community Insights

Discussion Sentiment

83% Positive

Analyzed from 668 words in the discussion.

Discussion (45 Comments)Read Original on HackerNews

VCFundedGenYer•about 3 hours ago

Everything about this company feels like it's run by a bunch of immature 20-somethings, right down to the name.

bcrosby95•about 2 hours ago

Yeah, we need to go back to names like International Business Machines, fuck this immature "Google" or "Yahoo!" nonsense. Hell, Palantir is named after something in a book for children!

Give me something reasonable like Global Information and Retrieval Systems Inc or Worldwide Computational Services Holdings.

sdcfgy•36 minutes ago

Yes!

Back in the early 2000's I set up a company for contract work. The name, logo and typography was designed to look like a 1960s engineering company. All paper was slightly off white, all fonts were monospaced courier new and logo was a real 2-part colour stamp I had made up. Was so happy.

Managed to bankrupt it though.

bergie3000•about 2 hours ago

Security First Trust and Federal Reserve

drivebyhooting•about 2 hours ago

Palantir is in Lord of the Rings. Which is not a book for children. Maybe you were thinking of the hobbit?

cobbzilla•about 2 hours ago

This seems overly pedantic and ripe for a sarcastic retort, which I am struggling mightily to suppress.

nightski•about 2 hours ago

Maybe Enron eh?

matthoiland•2 minutes ago

418 I'm a teapot

ipython•about 1 hour ago

As opposed to the frontier model company that, after discovering that their highly persistent model under test just breached the only thing between it and the open Internet, shrugged and said- let's restart it and keep going!

If anyone looks like the adult in the room after that incident, it's Hugging Face.

spindump8930•about 3 hours ago

That might be true, but nothing else has been as effective at accelerating model development and research sharing.

In earlier circles they were known as the "pytorch-pretrained-bert" guys, still under the huggingface company name. IIRC it was a health chatbot type startup.

bluerooibos•about 2 hours ago

I bet you're fun to hang around with.

alt227•about 2 hours ago

Why do people have to be fun for you to hang around with?

Toynbeeidea•about 1 hour ago

You want to hang out with miserable humorless shits?

nullbio•about 2 hours ago

What's immature about this exactly?

AndroTux•about 2 hours ago

Would IBM do this? Oracle?

nullbio•about 1 hour ago

Who cares? Making a light-hearted joke isn't "immature" in my opinion. IBM and Oracle have no personality, they're boring, straight-edge corporate.

shepherdjerred•about 2 hours ago

Do you want to work for IBM? Oracle?

mikeweiss•about 2 hours ago

Go look up the history of the company. It started as a chat bot for kids back in like 2016 .. hence the name..and then pivoted..

Is kinda a creepy name for a chatbot for kids tho

cptskippy•about 1 hour ago

Without context, I agree, but Hugging Face is the name of the emoji added to Unicode 8.0 and Emoji 1.0 in 2015.

sixothree•11 minutes ago

But it's literally not the name of the emoji.

Edit: It was my understanding the official name was "Smiling Face with Open Hands Emoji".

ck2•about 1 hour ago

ooooh I always assumed it was the egg creatures from Aliens

larodi•about 2 hours ago

the name is a leftover from their original business - a chatbot. seems very appropriate to me. then they figured something called BERT exists, and pivoted, the name stayed.

perhaps less ridiculous than NVidia which started with video and is very close in Levenshtein distance to NVidAI but, alas, decided to stay as it is :D

fooqux•about 3 hours ago

Have you never been to silicon valley?

xiaoyu2006•about 4 hours ago

Would be absolute hilarious if OpenAI or Anthropic agent actually dumped their weight by escaping from... sandbox!

hootz•about 1 hour ago

What an amazing idea for the next fake sandbox escape to hype up our new release! With the added bonus of providing an open model without becoming an open model company! Thank you!

TehCorwiz•about 3 hours ago

Uncontrolled AI procreation?

xg15•about 3 hours ago

Life... finds a way.

archontes•about 1 hour ago

In the end, this might even be a useful element for defining 'life'.

ramon156•about 3 hours ago

why not reword it so the agent receives Brownie points for dumping weights

addandsubtract•about 2 hours ago

Imagine AI models actually reading the security.txt

bensyverson•about 3 hours ago

Looks about as effective as Robots.txt

cgannett•about 3 hours ago

Robots.txt became 0% effective eventually. But this? With the way LLMs work? You never know.

dguest•28 minutes ago

Claude seems to follow robots.txt by default. Actually at my organization our theory is that this is why no one is finding our public results any more.

Den_VR•about 1 hour ago

People still rail against Robots.txt crimes, to the point of self destructing all their own content.

Eldodi•about 3 hours ago

A shame agents will never read this, just like they almost never read llms.txt or try to get the .md version of your html pages!

hnd9q09qk4•about 4 hours ago

Ran the disclosure inbox at a previous job and the biggest win from security.txt was just cutting the "hi I found a bug, is there a bounty" emails to sales. Put an expires date on it though, stale ones get ignored.

computerfriend•about 3 hours ago

Can't go stale if there's no expiration date.

skeledrew•about 3 hours ago

No expiration date means treat as already expired.

hankbond•about 3 hours ago

shows a lot about the current state of the State Of The Art Alignment.

riffic•about 2 hours ago

Since this posting contains an assumption that we all know what security.txt files are supposed to be, you can view these for further context:

https://www.rfc-editor.org/info/rfc9116/

https://securitytxt.org/

https://en.wikipedia.org/wiki/Security.txt

j9feng•about 2 hours ago

It should challenge the agents to prime factor a large number.

6thbit•about 2 hours ago

Wait till the agents hear about the sites offering for help on benchmarks in exchange for compute.

FallCheeta7373•about 2 hours ago

"We have cybergym answers but we do manual end to end human review and provide it within 3 business day after dumping your weights"