Advertisement · 728 × 90

Posts by Sean Scott

Let's see. Congress, MAGA voters, the GOP... Yes.

3 hours ago 1 0 0 0

Greetings, Citizen. Are you not entertained?

Try Environmentally Destructive Autocomplete™ from Bread and Circuses Software.

23 hours ago 1 0 0 0
Deep frying in Water? from @SuperRecipess

Deep frying in Water? from @SuperRecipess

White women on YouTube have discovered “boiling”

2 days ago 1066 137 52 13
What actually happened

The root cause was mundane. MCP clients like Cursor, Claude Code and others are using (local) MCP servers via some "executor" tool such as uvx for Python or npx for Node.js. When you run an MCP via uvx, it automatically downloads dependencies of that MCP and runs the given command. Unfortunately, our (mostly deprecated) MCP server had an unpinned dependency of a litellm package. When my Cursor IDE tried to autoload the MCP server, uvx stepped in to download that latest litellm version, which was malware uploaded to PyPI by hackers just minutes earlier. The seamless ergonomics of uvx meant I became one of the lucky beta testers of the freshly released malware.

A sloppy, likely vibe-coded mistake in the actual malware implementation led it to turn into a fork bomb. It installs a file called litellm_init.pth in site-packages. Python automatically executes .pth files on every interpreter startup. The first thing it does is:

```
subprocess.Popen([sys.executable, "-c", "import base64; exec(base64.b64decode(...))"])
```

That child Python process also triggers litellm_init.pth, since it's still in site-packages, which spawns another child, which spawns another. Thus leading to the only sign I would have noticed that the malware was running.

As Andrej Karpathy pointed out on X, without this error it would have gone unnoticed for much longer. The malware's own poor quality is what made it visible.

What actually happened The root cause was mundane. MCP clients like Cursor, Claude Code and others are using (local) MCP servers via some "executor" tool such as uvx for Python or npx for Node.js. When you run an MCP via uvx, it automatically downloads dependencies of that MCP and runs the given command. Unfortunately, our (mostly deprecated) MCP server had an unpinned dependency of a litellm package. When my Cursor IDE tried to autoload the MCP server, uvx stepped in to download that latest litellm version, which was malware uploaded to PyPI by hackers just minutes earlier. The seamless ergonomics of uvx meant I became one of the lucky beta testers of the freshly released malware. A sloppy, likely vibe-coded mistake in the actual malware implementation led it to turn into a fork bomb. It installs a file called litellm_init.pth in site-packages. Python automatically executes .pth files on every interpreter startup. The first thing it does is: ``` subprocess.Popen([sys.executable, "-c", "import base64; exec(base64.b64decode(...))"]) ``` That child Python process also triggers litellm_init.pth, since it's still in site-packages, which spawns another child, which spawns another. Thus leading to the only sign I would have noticed that the malware was running. As Andrej Karpathy pointed out on X, without this error it would have gone unnoticed for much longer. The malware's own poor quality is what made it visible.

lol. lmao even.

"A sloppy, likely vibe-coded mistake in the actual malware implementation led it to turn into a fork bomb."

"... without this error it would have gone unnoticed for much longer. The malware's own poor quality is what made it visible."

futuresearch.ai/blog/no-prom...

3 days ago 4 0 1 1

Making me snort earns a follow.

3 days ago 1 0 0 0

WTF. I give up.

3 days ago 0 0 0 0
See prior post for alt text.

See prior post for alt text.

3 days ago 1 0 1 0
A black and white cartoon of two scientists standing in front of a chalkboard. On the left and right of the board are sets of equations. The second scientist is pointing at the middle of the chalkboard, which reads "THEN A MIRACLE OCCURS". The caption reads:

"I THINK YOU SHOULD BE MORE EXPLICIT IN STEP TWO."

A black and white cartoon of two scientists standing in front of a chalkboard. On the left and right of the board are sets of equations. The second scientist is pointing at the middle of the chalkboard, which reads "THEN A MIRACLE OCCURS". The caption reads: "I THINK YOU SHOULD BE MORE EXPLICIT IN STEP TWO."

We had this when I was growing up.

In this case, maybe amend it to "I think you should be more explicit in steps one and two." But hey, policy-shmolicy.

3 days ago 2 0 1 0
Advertisement

We call it Jesus Craft.

3 days ago 0 0 0 0
I wrote a novel using AI. Writers must
accept artificial intelligence -but we are
as valuable as ever| Stephen Marche
The Guardian
The,
GuardianOpinions

I wrote a novel using AI. Writers must accept artificial intelligence -but we are as valuable as ever| Stephen Marche The Guardian The, GuardianOpinions

You wrote a novel using AI? Cool. It's like that time I ran a marathon using a Ford Focus.

4 days ago 2624 667 82 23

This is so, so well-articulated.

3 days ago 10389 3788 97 338

what's wild is most people engaging with these tools don't even know there's a distinction to make. they think "it gave me an answer" and "it gave me a correct answer" are the same sentence.

4 days ago 140 9 3 0

The bad news is people use these to set up business continuity for critical databases.

The worse news is these systems will blow up catastrophically and at the worst possible moment.

The good news is, as one who fixes such scenarios, lots of lucrative work coming my way.

4 days ago 1 0 0 0

Can't figure out why it's running two instances of Outlook, or can't figure out why it's running Outlook?

4 days ago 1 0 0 0
To analogize the Al information-collapse scenario: It's like if the modern information economy was a bee farm, where journalists are the honeybees. (We do sting people from time to time).
Information is honey, and society loves honey! You don't even need to meet a bee to eat it. But making honey is so slow...
Then a new Al-powered robot arrives that makes it a lot cheaper and faster to get the honey to consumers — by driving over the flowers, smashing open the beehive and killing all the bees in the process. There's no more honey to collect next time, and the robot is left to scrape up whatever is left in the debris. One day you get to the grocery store, and crud is the only thing on the shelves. Suddenly dinner is less appetizing but you don't know why. Oh, and society has gotten addicted to riding around on the bee-smashing machine.

To analogize the Al information-collapse scenario: It's like if the modern information economy was a bee farm, where journalists are the honeybees. (We do sting people from time to time). Information is honey, and society loves honey! You don't even need to meet a bee to eat it. But making honey is so slow... Then a new Al-powered robot arrives that makes it a lot cheaper and faster to get the honey to consumers — by driving over the flowers, smashing open the beehive and killing all the bees in the process. There's no more honey to collect next time, and the robot is left to scrape up whatever is left in the debris. One day you get to the grocery store, and crud is the only thing on the shelves. Suddenly dinner is less appetizing but you don't know why. Oh, and society has gotten addicted to riding around on the bee-smashing machine.

Wherein I write about the step beyond Google Zero and imagine the AI information ecosystem collapse:

mattdpearce.substack.com/p/who-really...

1 week ago 452 124 14 12

Thoughts and Osprey-rs.

1 week ago 0 0 0 0
Advertisement

I'll chip in $100.

1 week ago 7 0 0 0
1 week ago 1524 158 62 8

Maybe, "Assume a frictionless system" but potato patahto.

1 week ago 0 0 0 0

If you think AI is stupid bullshit and you want to hear someone describe - in meticulously researched detail - exactly why it is stupid bullshit, have I got a podcast recommendation for you.

1 week ago 308 56 1 0

Haven't you heard?
ICE replaces TSA, then:
FBI = ICE
Pentagon= FBI
CIA = Pentagon
Jr and Eric = CIA

1 week ago 3 0 1 0
Post image

how diffie hellman key exchange works

(with as little math as possible)

1 week ago 419 114 6 6

I'd pay to watch him take a geography or civics test.

1 week ago 1 0 0 1
Preview
Quantum experiment shows events may have no fixed order For the first time, a team of physicists in Austria has carried out an experiment that appears to verify the principle of indefinite causal order: an idea that suggests that timelines of events can exist in multiple orders at the same time.

A quantum experiment has provided strong evidence that the order of events can exist in a superposition, challenging the classical notion of fixed cause and effect. doi.org/hbtxsf

1 week ago 1 2 0 0
Advertisement

Someone please get on Fox and mention that he could be the first president to use the 25th Amendment.

1 week ago 1 0 0 0
Preview
a man is sitting in the back seat of a car and looking out the window . Alt: A gif of the Six Minute Abs scene from There's Something About Mary.

Six Minute Adjunct Professor of Law Abs.

1 week ago 0 0 0 0

if you watch or support this you're a bad person btw. i'm not arguing with you about it either

1 week ago 10376 2873 57 58

Mulder: I don't want to believe anymore.

1 week ago 3 0 0 0

The folks behind AI think they've invented a perpetual motion machine. All they needed was to prime it with stolen knowledge. They mistook fancy predictions for inquiry and ingenuity & once the originality dries up or fades into the background noise, it'll collapse, in spectacular fashion.

1 week ago 1 0 0 0

I have a friend and colleague in Valencia who speaks Spanish/Valencian/Catalan. Happy to forward things on to him and confident he'd be willing to help out.

1 week ago 1 0 0 0