@Quickswitch79 Due to the magic of the Fediverse you don't even need to be on Lemmy!

Kbin is another similar system that interacts with Lemmy, and this reply has come from Mastodon!

Although in general I wouldn't recommend using Mastodon to interact with Lemmy communities, it works but it's not what either system is optimised for so it's a bit clunky.

But it's still pretty amazing to me: it's like using Twitter or Instagram to read and reply to Reddit!

@gerikson @rmf Yeah I don't see how this is a vuln that specifically targets LLMs rather than just git users in general. If the vulnerable command is git checkout BLAH because BLAH has been poisoned from a SHA to a ref, that's going to affect anyone or anything that issues that command, human or machine, surely?

@rmf I'm not disagreeing with any of that. This is definitely a class of mistake (let's be generous and call it that) which LLMs are more likely to make than humans in normal circumstances.

But it's being touted around as an LLM-specific flaw which it isn't. They do have their specific weaknesses, prompt injection of course still being a major one (e.g. Meta's AI being persuaded to gzip & copy over its entire filesystem). But this is, if anything, a weakness in git. And I guess not entirely new, either, given that Github (and maybe other hosts) explicitly prevent users from creating a ref that looks like a SHA.

@kev Yep no problem, I'm definitely not demanding "GIMME A SOLUTION NOW!!" but it's somewhat annoying that the federation in the threadiverse doesn't seem to work as well as it should.

@stillnotahero Ask away!

I've been on the Fediverse (Mastodon) for well over a year, and Kbin for a couple of weeks now - after 12 years of Redditing.

@kev Haha I'm the complete opposite. My career has been completely on back-end systems. I can design you an elegant API with my eyes closed, but frequently I see people complaining about UI/UX issues and I genuinely never clocked that there was a problem until someone pointed it out.

@kev Trying to work out how to subscribe to that from kbin.social. Putting that link into the kbin search box returns no results.

@kev I just figured out the subscription, too.

I needed to search for @manchester in the kbin search tool. And now I'm subscribed (from my kbin account).

@Sausage @kev @manchester Gah this is all frustratingly inconsistent. I know it's still early days for kbin and I've been spoilt by the relative maturity of Mastodon, but even so, surely the whole point of the Fediverse is federation!