{"generator":"GNU social 2.0.2-dev","title":"Conversation","totalItems":20,"items":[{"actor":{"id":"https:\/\/mastodon.gamedev.place\/users\/kevingranade","displayName":"Kevin Granade","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/356907-original-tmp20250805183117.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/356907-96-20250925175221.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/356907-48-20250925175221.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/356907-24-20250925175221.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"356907"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/356907-96-20250925175221.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Software developer, FOSS enthusiast, and accidental gamedev.See https:\/\/cataclysmdda.org for my game, or not, I'm not your supervisor.I mostly work in C++ and zombies, though I occasionally dabble in lisp and other eldritch horrors.","url":"https:\/\/mastodon.gamedev.place\/@kevingranade","portablecontacts_net":{"preferredUsername":"kevingranade","displayName":"Kevin Granade","note":"Software developer, FOSS enthusiast, and accidental gamedev.See https:\/\/cataclysmdda.org for my game, or not, I'm not your supervisor.I mostly work in C++ and zombies, though I occasionally dabble in lisp and other eldritch horrors."}},"content":"

@cwebber<\/a> this made me wonder, is anyone seeing hidden prompts on web pages attempting injection attacks? Summarizing content is apparently a popular use case, but the chances that the agent used has more permissions than it needs to do that are high.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.gamedev.place\/users\/kevingranade\/statuses\/116188605118933699","object":{"id":"https:\/\/mastodon.gamedev.place\/users\/kevingranade\/statuses\/116188605118933699","objectType":"note","content":"

@cwebber<\/a> this made me wonder, is anyone seeing hidden prompts on web pages attempting injection attacks? Summarizing content is apparently a popular use case, but the chances that the agent used has more permissions than it needs to do that are high.<\/p>","url":"https:\/\/mastodon.gamedev.place\/@kevingranade\/116188605118933699","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178050263113242","url":"https:\/\/social.coop\/@cwebber\/116178050263113242"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251907","source":"ActivityPub"}},"published":"2026-03-07T15:46:36+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.gamedev.place\/@kevingranade\/116188605118933699"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

@dlakelan<\/a> @quintessence<\/a> Yes, I have been thinking that. Now we also need to ramp up the use of least-authority.scm<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188469527012112","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188469527012112","objectType":"note","content":"

@dlakelan<\/a> @quintessence<\/a> Yes, I have been thinking that. Now we also need to ramp up the use of least-authority.scm<\/p>","url":"https:\/\/gnusocial.jp\/notice\/12251626","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.sdf.org\/users\/dlakelan\/statuses\/116188466252063324","url":"https:\/\/mastodon.sdf.org\/@dlakelan\/116188466252063324"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/hachyderm.io\/users\/quintessence"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.sdf.org\/users\/dlakelan"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251626","source":"ActivityPub"}},"published":"2026-03-07T14:57:26+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/gnusocial.jp\/notice\/12251626"},{"actor":{"id":"https:\/\/mastodon.sdf.org\/users\/dlakelan","displayName":"Daniel Lakeland","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/206060-original-tmp20231031070501.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/206060-96-20231031070501.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/206060-48-20231031070501.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/206060-24-20231031070501.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"206060"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/206060-96-20231031070501.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Applied Mathematician, Julia programmer, father of two amazing boys, official coonhound mix mutt-walker.PhD in Civil Engineering. Debian Linux user since ca. 1994. Bayesian data analysis iconoclast","url":"https:\/\/mastodon.sdf.org\/@dlakelan","portablecontacts_net":{"preferredUsername":"dlakelan","displayName":"Daniel Lakeland","note":"Applied Mathematician, Julia programmer, father of two amazing boys, official coonhound mix mutt-walker.PhD in Civil Engineering. Debian Linux user since ca. 1994. Bayesian data analysis iconoclast"}},"content":"

@cwebber<\/a>
#guix<\/a> time-machine to the rescue.<\/p>

@quintessence<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.sdf.org\/users\/dlakelan\/statuses\/116188466252063324","object":{"id":"https:\/\/mastodon.sdf.org\/users\/dlakelan\/statuses\/116188466252063324","objectType":"note","content":"

@cwebber<\/a>
#guix<\/a> time-machine to the rescue.<\/p>

@quintessence<\/a><\/p>","url":"https:\/\/mastodon.sdf.org\/@dlakelan\/116188466252063324","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188412877698342","url":"https:\/\/social.coop\/@cwebber\/116188412877698342"},"tags":[{"objectType":"http:\/\/activityschema.org\/object\/hashtag","displayName":"guix"}]},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/hachyderm.io\/users\/quintessence"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251617","source":"ActivityPub"}},"published":"2026-03-07T14:56:31+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.sdf.org\/@dlakelan\/116188466252063324"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

@dalias<\/a> Sure. But also, there's a reason that parasites and diseases move from towards less lethal strategies: it's much better for survival to just suck a bit of blood at a time undetected.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188456792731186","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188456792731186","objectType":"note","content":"

@dalias<\/a> Sure. But also, there's a reason that parasites and diseases move from towards less lethal strategies: it's much better for survival to just suck a bit of blood at a time undetected.<\/p>","url":"https:\/\/social.coop\/@cwebber\/116188456792731186","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116188452067478802","url":"https:\/\/hachyderm.io\/@dalias\/116188452067478802"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/hachyderm.io\/users\/dalias"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251582","source":"ActivityPub"}},"published":"2026-03-07T14:52:51+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.coop\/@cwebber\/116188456792731186"},{"actor":{"id":"https:\/\/hachyderm.io\/users\/dalias","displayName":"Rich Felker","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/40873-original-tmp20221202140938.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-48-20221207231635.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/40873-24-20221207231635.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"40873"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/40873-96-20221207231635.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa","url":"https:\/\/hachyderm.io\/@dalias","portablecontacts_net":{"preferredUsername":"dalias","displayName":"Rich Felker","note":"C librarian, purveyor of the language's eldritch horrors. Poppin' shells \ud83e\uddaa"}},"content":"

@cwebber<\/a> We should preempt it with one that just wipes the systems using \"AI\" agents.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116188452067478802","object":{"id":"https:\/\/hachyderm.io\/users\/dalias\/statuses\/116188452067478802","objectType":"note","content":"

@cwebber<\/a> We should preempt it with one that just wipes the systems using \"AI\" agents.<\/p>","url":"https:\/\/hachyderm.io\/@dalias\/116188452067478802","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178050263113242","url":"https:\/\/social.coop\/@cwebber\/116178050263113242"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251565","source":"ActivityPub"}},"published":"2026-03-07T14:51:23+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/hachyderm.io\/@dalias\/116188452067478802"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

The question is not if, it's when. I am dead serious that we will have never seen a cybersecurity incident like this before, because it can self-mutate at a pace much faster than random mutation in physical viruses.<\/p>

Workshopped a phrase for it a bit with @quintessence<\/a> last night: \"evolution through artificially intelligent design\" of malicious behaviors.<\/p>

The only solution I can think of once this happens is to shut down network access, particularly to AI service providers, and roll back to software distros based on software that came out a year older and patch our way back up against known CVEs while we try to sort everything out.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188412877698342","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188412877698342","objectType":"note","content":"

The question is not if, it's when. I am dead serious that we will have never seen a cybersecurity incident like this before, because it can self-mutate at a pace much faster than random mutation in physical viruses.<\/p>

Workshopped a phrase for it a bit with @quintessence<\/a> last night: \"evolution through artificially intelligent design\" of malicious behaviors.<\/p>

The only solution I can think of once this happens is to shut down network access, particularly to AI service providers, and roll back to software distros based on software that came out a year older and patch our way back up against known CVEs while we try to sort everything out.<\/p>","url":"https:\/\/social.coop\/@cwebber\/116188412877698342","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188395204368076","url":"https:\/\/social.coop\/@cwebber\/116188395204368076"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/hachyderm.io\/users\/quintessence"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251541","source":"ActivityPub"}},"published":"2026-03-07T14:48:25+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.coop\/@cwebber\/116188412877698342"},{"actor":{"id":"https:\/\/mastodon.online\/users\/ATLeagle","displayName":"mark","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/33848-original-tmp20221120165039.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/33848-96-20230715063505.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/33848-48-20230715063505.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/33848-24-20230715063505.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"33848"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/33848-96-20230715063505.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"enshitification consultant. I like art and pictures of cats and birds and flowers. I like working on old cars, and hate living in a car based society.","url":"https:\/\/mastodon.online\/@ATLeagle","portablecontacts_net":{"preferredUsername":"ATLeagle","displayName":"mark","note":"enshitification consultant. I like art and pictures of cats and birds and flowers. I like working on old cars, and hate living in a car based society."}},"content":"

@cwebber<\/a> @quintessence<\/a> this is how we got Battlestar galactica<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.online\/users\/ATLeagle\/statuses\/116188423195299412","object":{"id":"https:\/\/mastodon.online\/users\/ATLeagle\/statuses\/116188423195299412","objectType":"note","content":"

@cwebber<\/a> @quintessence<\/a> this is how we got Battlestar galactica<\/p>","url":"https:\/\/mastodon.online\/@ATLeagle\/116188423195299412","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188412877698342","url":"https:\/\/social.coop\/@cwebber\/116188412877698342"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/hachyderm.io\/users\/quintessence"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251542","source":"ActivityPub"}},"published":"2026-03-07T14:48:24+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.online\/@ATLeagle\/116188423195299412"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

The interesting thing about the AI worm being imminent thing is this is the first time where I have said something about AI where the well-informed sides of anti-ai and pro-ai friends I have both fully agree with me. If you are paying attention enough, you can see that all the pieces are falling in place.<\/p>

In fact, the biggest debate is whether this has happened already, and we just haven't seen proof of it yet. I don't know. Given how long things like the xz attack have sat undetected, and given how much chaos of computation is happening in datacenter usage right now, I wouldn't doubt it.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188395204368076","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116188395204368076","objectType":"note","content":"

The interesting thing about the AI worm being imminent thing is this is the first time where I have said something about AI where the well-informed sides of anti-ai and pro-ai friends I have both fully agree with me. If you are paying attention enough, you can see that all the pieces are falling in place.<\/p>

In fact, the biggest debate is whether this has happened already, and we just haven't seen proof of it yet. I don't know. Given how long things like the xz attack have sat undetected, and given how much chaos of computation is happening in datacenter usage right now, I wouldn't doubt it.<\/p>","url":"https:\/\/social.coop\/@cwebber\/116188395204368076","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178247543315049","url":"https:\/\/social.coop\/@cwebber\/116178247543315049"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12251486","source":"ActivityPub"}},"published":"2026-03-07T14:37:35+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.coop\/@cwebber\/116188395204368076"},{"actor":{"id":"https:\/\/nya.one\/users\/8pb0te4oi9","displayName":"Orca? | ??\ufe0f\u200d\u26a7\ufe0f","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/24273-original-tmp20221112083346.webp","rel":"avatar","type":"image\/webp","width":1378,"height":1378},{"url":"https:\/\/gnusocial.jp\/avatar\/24273-96-20221112083347.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/24273-48-20221112083347.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/24273-24-20221112083348.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"24273"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/24273-96-20221112083347.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"\u4ec5\u5b58\u5728\u4e8e\u6b64\u523b\u7684\u5e7b\u60f3\u3002\u559c\u6012\u65e0\u5e38\u3002\u6bcf\u5929\u90fd\u60f3\u53bb\u6b7b\u4f46\u662f\u53c8\u56e0\u4e3a\u6015\u9ebb\u70e6\u6015\u75db\u800c\u653e\u5f03\u7684\u4e1a\u4f59\u4e2d\u7684\u4e1a\u4f59\u7684\u4fe1\u606f\u5b89\u5168\u7814\u7a76\u8005\u3002\u5934\u50cf\uff1ahttps:\/\/www.pixiv.net\/artworks\/84545961\u6a2a\u5e45\uff1ahttps:\/\/www.pixiv.net\/artworks\/81490943#nobot #nobots\u4e0d\u63a5\u53d7\u5173\u6ce8\u3002\u52ff\u53cd\u590d\u7533\u8bf7\u5173\u6ce8\uff0c\u4f1a\u62db\u81f4\u62c9\u9ed1\u3002Will likely not accept follow request.\u8f6c\u53d1\u72c2\u9b54\uff0c\u4e00\u4e9b\u539f\u521b\u3002\u8f6c\u8f7d\/remix\u672c\u4eba\u516c\u5f00\u53d1\u5e03\u7684\u539f\u521b\u5185\u5bb9\uff08\u4ec5\u5173\u6ce8\u8005\u53ef\u89c1\/\u79c1\u4fe1\u5185\u5bb9\u9664\u5916\uff09\u8bf7\u6ce8\u610f\u9075\u5b88CC BY-SA 4.0 International\u6388\u6743\u7684\u8981\u6c42\uff0c\u7ed9\u4e88\u7f72\u540d\u5e76\u4ee5\u76f8\u540c\u5f62\u5f0f\u53d1\u8868\u5185\u5bb9\u3002\u8f6c\u8f7d\/remix\u672c\u4eba\u672a\u516c\u5f00\u53d1\u5e03\u7684\u539f\u521b\u5185\u5bb9\u8bf7\u8bf7\u6c42\u672c\u4eba\u8bb8\u53ef\uff08\u9664\u975e\u989d\u5916\u8bf4\u660e\uff09\u5e76\u9075\u5b88CC No Attribution\u6388\u6743\uff08\u89c1 https:\/\/cybre.space\/@niconiconi\/107386435061136354 \uff09\u7684\u8981\u6c42\uff0c\u4e0d\u5f97\u7ed9\u4e88\u4efb\u4f55\u7f72\u540d\u3002?\ufe0f\u200d??\ufe0f\u200d\u26a7\ufe0f\u6211\u5411\u6765\u4e0d\u60ee\u4ee5\u6700\u574f\u7684\u6076\u610f\u63e3\u6d4b\u4e2d\u56fd\u4eba\u3002","url":"https:\/\/nya.one\/@Orca","portablecontacts_net":{"preferredUsername":"Orca","displayName":"Orca? | ??\ufe0f\u200d\u26a7\ufe0f","note":"\u4ec5\u5b58\u5728\u4e8e\u6b64\u523b\u7684\u5e7b\u60f3\u3002\u559c\u6012\u65e0\u5e38\u3002\u6bcf\u5929\u90fd\u60f3\u53bb\u6b7b\u4f46\u662f\u53c8\u56e0\u4e3a\u6015\u9ebb\u70e6\u6015\u75db\u800c\u653e\u5f03\u7684\u4e1a\u4f59\u4e2d\u7684\u4e1a\u4f59\u7684\u4fe1\u606f\u5b89\u5168\u7814\u7a76\u8005\u3002\u5934\u50cf\uff1ahttps:\/\/www.pixiv.net\/artworks\/84545961\u6a2a\u5e45\uff1ahttps:\/\/www.pixiv.net\/artworks\/81490943#nobot #nobots\u4e0d\u63a5\u53d7\u5173\u6ce8\u3002\u52ff\u53cd\u590d\u7533\u8bf7\u5173\u6ce8\uff0c\u4f1a\u62db\u81f4\u62c9\u9ed1\u3002Will likely not accept follow request.\u8f6c\u53d1\u72c2\u9b54\uff0c\u4e00\u4e9b\u539f\u521b\u3002\u8f6c\u8f7d\/remix\u672c\u4eba\u516c\u5f00\u53d1\u5e03\u7684\u539f\u521b\u5185\u5bb9\uff08\u4ec5\u5173\u6ce8\u8005\u53ef\u89c1\/\u79c1\u4fe1\u5185\u5bb9\u9664\u5916\uff09\u8bf7\u6ce8\u610f\u9075\u5b88CC BY-SA 4.0 International\u6388\u6743\u7684\u8981\u6c42\uff0c\u7ed9\u4e88\u7f72\u540d\u5e76\u4ee5\u76f8\u540c\u5f62\u5f0f\u53d1\u8868\u5185\u5bb9\u3002\u8f6c\u8f7d\/remix\u672c\u4eba\u672a\u516c\u5f00\u53d1\u5e03\u7684\u539f\u521b\u5185\u5bb9\u8bf7\u8bf7\u6c42\u672c\u4eba\u8bb8\u53ef\uff08\u9664\u975e\u989d\u5916\u8bf4\u660e\uff09\u5e76\u9075\u5b88CC No Attribution\u6388\u6743\uff08\u89c1 https:\/\/cybre.space\/@niconiconi\/107386435061136354 \uff09\u7684\u8981\u6c42\uff0c\u4e0d\u5f97\u7ed9\u4e88\u4efb\u4f55\u7f72\u540d\u3002?\ufe0f\u200d??\ufe0f\u200d\u26a7\ufe0f\u6211\u5411\u6765\u4e0d\u60ee\u4ee5\u6700\u574f\u7684\u6076\u610f\u63e3\u6d4b\u4e2d\u56fd\u4eba\u3002"}},"content":"@cwebber@social.coop<\/a> Morris II \ud83d\ude11
https:\/\/sites.google.com\/view\/compromptmized<\/a>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/nya.one\/notes\/ajhlyujdq0770t4p","object":{"id":"https:\/\/nya.one\/notes\/ajhlyujdq0770t4p","objectType":"note","content":"@cwebber@social.coop<\/a> Morris II \ud83d\ude11
https:\/\/sites.google.com\/view\/compromptmized<\/a>","url":"https:\/\/nya.one\/notes\/ajhlyujdq0770t4p","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178050263113242","url":"https:\/\/social.coop\/@cwebber\/116178050263113242"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12240440","source":"ActivityPub"}},"published":"2026-03-05T22:47:00+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/nya.one\/notes\/ajhlyujdq0770t4p"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

@aeva<\/a> But once that was done, the agent was set up to install on users' devices<\/p>

So the initial attack vector can literally be \"Any AI agent in your stack whatsoever getting tricked\" as a pathway for infecting computers everywhere<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178687702831355","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178687702831355","objectType":"note","content":"

@aeva<\/a> But once that was done, the agent was set up to install on users' devices<\/p>

So the initial attack vector can literally be \"Any AI agent in your stack whatsoever getting tricked\" as a pathway for infecting computers everywhere<\/p>","url":"https:\/\/social.coop\/@cwebber\/116178687702831355","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178684882523393","url":"https:\/\/social.coop\/@cwebber\/116178684882523393"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.gamedev.place\/users\/aeva"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12240004","source":"ActivityPub"}},"published":"2026-03-05T21:28:25+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.coop\/@cwebber\/116178687702831355"},{"actor":{"id":"https:\/\/mastodon.gamedev.place\/users\/aeva","displayName":"aeva","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/20435-original-tmp20251104165625.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/20435-96-20251104171638.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/20435-48-20251104171638.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/20435-24-20251104225031.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"20435"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/20435-96-20251104171638.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"I'm a just a small town AAA graphics programmer in Chicago. I worked on Gears 5 and Gears Tactics. My work is secret, but my personal projects are not.I like to post about my personal research, various side projects, and I like to think out loud a lot. Expect weird humor, esoteric ramblings, and occasionally also art I made out of math. I like implicit surface modeling the normal amount. Chronic pain enthusiast. \ud83c\udff3\ufe0f\u200d\u26a7\ufe0fCurses are just blessings with caveats.","url":"https:\/\/mastodon.gamedev.place\/@aeva","portablecontacts_net":{"preferredUsername":"aeva","displayName":"aeva","note":"I'm a just a small town AAA graphics programmer in Chicago. I worked on Gears 5 and Gears Tactics. My work is secret, but my personal projects are not.I like to post about my personal research, various side projects, and I like to think out loud a lot. Expect weird humor, esoteric ramblings, and occasionally also art I made out of math. I like implicit surface modeling the normal amount. Chronic pain enthusiast. \ud83c\udff3\ufe0f\u200d\u26a7\ufe0fCurses are just blessings with caveats."}},"content":"

@cwebber<\/a> so I'm following this right, it sounds like the project or its maintainers don't even necessarily need to even be using LLM tools, the attack pattern simply targets contributors who are using LLM development tools? and so all that is really needed is for the payload to be subtle and the maintainer to be sufficiently overwhelmed (say, by an endless fire hose of LLM-generated liquid shit slop pull requests)?<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.gamedev.place\/users\/aeva\/statuses\/116178675628497322","object":{"id":"https:\/\/mastodon.gamedev.place\/users\/aeva\/statuses\/116178675628497322","objectType":"note","content":"

@cwebber<\/a> so I'm following this right, it sounds like the project or its maintainers don't even necessarily need to even be using LLM tools, the attack pattern simply targets contributors who are using LLM development tools? and so all that is really needed is for the payload to be subtle and the maintainer to be sufficiently overwhelmed (say, by an endless fire hose of LLM-generated liquid shit slop pull requests)?<\/p>","url":"https:\/\/mastodon.gamedev.place\/@aeva\/116178675628497322","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178247543315049","url":"https:\/\/social.coop\/@cwebber\/116178247543315049"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12240002","source":"ActivityPub"}},"published":"2026-03-05T21:28:02+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.gamedev.place\/@aeva\/116178675628497322"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

@aeva<\/a> Yes and it's worse than that: the maintainer doesn't even need to be running these tools on their computer. The attack I linked had Claude's independently-running REVIEW BOT on GitHub commit it via injection attack<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178684882523393","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178684882523393","objectType":"note","content":"

@aeva<\/a> Yes and it's worse than that: the maintainer doesn't even need to be running these tools on their computer. The attack I linked had Claude's independently-running REVIEW BOT on GitHub commit it via injection attack<\/p>","url":"https:\/\/social.coop\/@cwebber\/116178684882523393","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.gamedev.place\/users\/aeva\/statuses\/116178675628497322","url":"https:\/\/mastodon.gamedev.place\/@aeva\/116178675628497322"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.gamedev.place\/users\/aeva"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12240003","source":"ActivityPub"}},"published":"2026-03-05T21:28:01+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.coop\/@cwebber\/116178684882523393"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"RT @cwebber @dandylyons @cwebber it is about an attack based on covertly deploying LLM development tools, with the possible intent of later using them to leverage a second stage attack. If the LLM development tools were already installed, installing openclaw would not have been necessary and the attack could have worked a different way. We are discussing a situation where *the developer of a piece of software I use merely having LLM tools on their computer represents a risk to me*","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178432377957497\/activity","object":{"id":"https:\/\/iosdev.space\/users\/dandylyons\/statuses\/116178380460225892","objectType":"note","content":"

@mcc<\/a> @cwebber<\/a> The original post was all about an LLM taking non-deterministic shell level actions at runtime. And you conflated that with deterministic code written by an LLM. <\/p>

What I wrote is very relevant.<\/p>","url":"https:\/\/iosdev.space\/@dandylyons\/116178380460225892","status_net":{"notice_id":null}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239627","source":"ActivityPub","repeat_of":"12239621"}},"published":"2026-03-05T20:25:24+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"title":"cwebber repeated a notice by dandylyons","verb":"share","url":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178432377957497\/activity"},{"actor":{"id":"https:\/\/iosdev.space\/users\/dandylyons","displayName":"Daniel Lyons","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/312294-original-tmp20250103174129.webp","rel":"avatar","type":"image\/webp","width":200,"height":200},{"url":"https:\/\/gnusocial.jp\/avatar\/312294-96-20250103174642.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/312294-48-20250103174642.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/312294-24-20250103174642.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"312294"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/312294-96-20250103174642.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"#musicpublishing admin by day \ud83d\udcbciOS, #swiftlang and #Godot developer by night \ud83e\uddb8\ud83c\udffc\u200d\u2642\ufe0f","url":"https:\/\/iosdev.space\/@dandylyons","portablecontacts_net":{"preferredUsername":"dandylyons","displayName":"Daniel Lyons","note":"#musicpublishing admin by day \ud83d\udcbciOS, #swiftlang and #Godot developer by night \ud83e\uddb8\ud83c\udffc\u200d\u2642\ufe0f"}},"content":"

@mcc<\/a> @cwebber<\/a> <\/p>

I think there is a valuable distinction between LLM-sourced code and LLM tool calls. Both are potentially problematic but have different threat vectors. <\/p>

LLM-sourced code is a non-deterministic system writing deterministic code. We can still code review it. <\/p>

LLM tool calls is a non-deterministic system taking non-deterministic actions via deterministic tools. This can\u2019t be code reviewed and must be sandboxed.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/iosdev.space\/users\/dandylyons\/statuses\/116178304118379942","object":{"id":"https:\/\/iosdev.space\/users\/dandylyons\/statuses\/116178304118379942","objectType":"note","content":"

@mcc<\/a> @cwebber<\/a> <\/p>

I think there is a valuable distinction between LLM-sourced code and LLM tool calls. Both are potentially problematic but have different threat vectors. <\/p>

LLM-sourced code is a non-deterministic system writing deterministic code. We can still code review it. <\/p>

LLM tool calls is a non-deterministic system taking non-deterministic actions via deterministic tools. This can\u2019t be code reviewed and must be sandboxed.<\/p>","url":"https:\/\/iosdev.space\/@dandylyons\/116178304118379942","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.social\/users\/mcc\/statuses\/116178056538536975","url":"https:\/\/mastodon.social\/@mcc\/116178056538536975"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/mcc"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239618","source":"ActivityPub"}},"published":"2026-03-05T20:24:27+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/iosdev.space\/@dandylyons\/116178304118379942"},{"actor":{"id":"https:\/\/iosdev.space\/users\/dandylyons","displayName":"Daniel Lyons","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/312294-original-tmp20250103174129.webp","rel":"avatar","type":"image\/webp","width":200,"height":200},{"url":"https:\/\/gnusocial.jp\/avatar\/312294-96-20250103174642.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/312294-48-20250103174642.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/312294-24-20250103174642.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"312294"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/312294-96-20250103174642.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"#musicpublishing admin by day \ud83d\udcbciOS, #swiftlang and #Godot developer by night \ud83e\uddb8\ud83c\udffc\u200d\u2642\ufe0f","url":"https:\/\/iosdev.space\/@dandylyons","portablecontacts_net":{"preferredUsername":"dandylyons","displayName":"Daniel Lyons","note":"#musicpublishing admin by day \ud83d\udcbciOS, #swiftlang and #Godot developer by night \ud83e\uddb8\ud83c\udffc\u200d\u2642\ufe0f"}},"content":"

@mcc<\/a> @cwebber<\/a> The original post was all about an LLM taking non-deterministic shell level actions at runtime. And you conflated that with deterministic code written by an LLM. <\/p>

What I wrote is very relevant.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/iosdev.space\/users\/dandylyons\/statuses\/116178380460225892","object":{"id":"https:\/\/iosdev.space\/users\/dandylyons\/statuses\/116178380460225892","objectType":"note","content":"

@mcc<\/a> @cwebber<\/a> The original post was all about an LLM taking non-deterministic shell level actions at runtime. And you conflated that with deterministic code written by an LLM. <\/p>

What I wrote is very relevant.<\/p>","url":"https:\/\/iosdev.space\/@dandylyons\/116178380460225892","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.social\/users\/mcc\/statuses\/116178330199919995","url":"https:\/\/mastodon.social\/@mcc\/116178330199919995"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/mcc"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239621","source":"ActivityPub"}},"published":"2026-03-05T20:24:26+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/iosdev.space\/@dandylyons\/116178380460225892"},{"actor":{"id":"https:\/\/mastodon.social\/users\/mcc","displayName":"mcc","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/10951-original-tmp20220921192024.webp","rel":"avatar","type":"image\/webp","width":120,"height":120},{"url":"https:\/\/gnusocial.jp\/avatar\/10951-96-20220921192024.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/10951-48-20220921192024.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/10951-24-20220921192024.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"10951"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/10951-96-20220921192024.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"glitch girl","url":"https:\/\/mastodon.social\/@mcc","portablecontacts_net":{"preferredUsername":"mcc","displayName":"mcc","note":"glitch girl"}},"content":"

@dandylyons<\/a> @cwebber<\/a> there are various ways I could respond to this post, but instead:<\/p>

I'd like you to consider *the specific two posts in this thread you are responding to* and ask yourself if your comment is remotely relevant, or if you are simply pattern-matching on anti-LLM sentiment and responding with aggression\/a thread derail.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.social\/users\/mcc\/statuses\/116178330199919995","object":{"id":"https:\/\/mastodon.social\/users\/mcc\/statuses\/116178330199919995","objectType":"note","content":"

@dandylyons<\/a> @cwebber<\/a> there are various ways I could respond to this post, but instead:<\/p>

I'd like you to consider *the specific two posts in this thread you are responding to* and ask yourself if your comment is remotely relevant, or if you are simply pattern-matching on anti-LLM sentiment and responding with aggression\/a thread derail.<\/p>","url":"https:\/\/mastodon.social\/@mcc\/116178330199919995","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/iosdev.space\/users\/dandylyons\/statuses\/116178304118379942","url":"https:\/\/iosdev.space\/@dandylyons\/116178304118379942"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/iosdev.space\/users\/dandylyons"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239619","source":"ActivityPub"}},"published":"2026-03-05T20:24:26+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.social\/@mcc\/116178330199919995"},{"actor":{"id":"https:\/\/mastodon.social\/users\/mcc","displayName":"mcc","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/10951-original-tmp20220921192024.webp","rel":"avatar","type":"image\/webp","width":120,"height":120},{"url":"https:\/\/gnusocial.jp\/avatar\/10951-96-20220921192024.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/10951-48-20220921192024.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/10951-24-20220921192024.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"10951"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/10951-96-20220921192024.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"glitch girl","url":"https:\/\/mastodon.social\/@mcc","portablecontacts_net":{"preferredUsername":"mcc","displayName":"mcc","note":"glitch girl"}},"content":"

@dandylyons<\/a> @cwebber<\/a> it is about an attack based on covertly deploying LLM development tools, with the possible intent of later using them to leverage a second stage attack. If the LLM development tools were already installed, installing openclaw would not have been necessary and the attack could have worked a different way. We are discussing a situation where *the developer of a piece of software I use merely having LLM tools on their computer represents a risk to me*<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/mastodon.social\/users\/mcc\/statuses\/116178428775421836","object":{"id":"https:\/\/mastodon.social\/users\/mcc\/statuses\/116178428775421836","objectType":"note","content":"

@dandylyons<\/a> @cwebber<\/a> it is about an attack based on covertly deploying LLM development tools, with the possible intent of later using them to leverage a second stage attack. If the LLM development tools were already installed, installing openclaw would not have been necessary and the attack could have worked a different way. We are discussing a situation where *the developer of a piece of software I use merely having LLM tools on their computer represents a risk to me*<\/p>","url":"https:\/\/mastodon.social\/@mcc\/116178428775421836","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/iosdev.space\/users\/dandylyons\/statuses\/116178380460225892","url":"https:\/\/iosdev.space\/@dandylyons\/116178380460225892"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/social.coop\/users\/cwebber"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/iosdev.space\/users\/dandylyons"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239623","source":"ActivityPub"}},"published":"2026-03-05T20:24:25+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/mastodon.social\/@mcc\/116178428775421836"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

@mcc<\/a> exactly put<\/p>

@dandylyons<\/a><\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178436076410863","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178436076410863","objectType":"note","content":"

@mcc<\/a> exactly put<\/p>

@dandylyons<\/a><\/p>","url":"https:\/\/social.coop\/@cwebber\/116178436076410863","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/mastodon.social\/users\/mcc\/statuses\/116178428775421836","url":"https:\/\/mastodon.social\/@mcc\/116178428775421836"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/mastodon.social\/users\/mcc"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/person","id":"https:\/\/iosdev.space\/users\/dandylyons"},{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239625","source":"ActivityPub"}},"published":"2026-03-05T20:24:24+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.coop\/@cwebber\/116178436076410863"},{"actor":{"id":"https:\/\/chaos.social\/users\/SylvieLorxu","displayName":"Sylvia","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/6650-original-tmp20230509062510.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/6650-96-20230804071137.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/6650-48-20230611192813.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/6650-24-20230804071137.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"6650"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/6650-96-20230804071137.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Queer FOSS nerd caring about social justiceLoves music, general preference for metal and electronic but open to other stylesLikes video games but avoids toxic gamer cultureLinux sysadmin by day, Android dev by night","url":"https:\/\/chaos.social\/@SylvieLorxu","portablecontacts_net":{"preferredUsername":"SylvieLorxu","displayName":"Sylvia","note":"Queer FOSS nerd caring about social justiceLoves music, general preference for metal and electronic but open to other stylesLikes video games but avoids toxic gamer cultureLinux sysadmin by day, Android dev by night"}},"content":"

@cwebber<\/a> Having OpenClaw installed without my consent is some of the nastiest malware I've seen in a while :(<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/chaos.social\/users\/SylvieLorxu\/statuses\/116178318289179917","object":{"id":"https:\/\/chaos.social\/users\/SylvieLorxu\/statuses\/116178318289179917","objectType":"note","content":"

@cwebber<\/a> Having OpenClaw installed without my consent is some of the nastiest malware I've seen in a while :(<\/p>","url":"https:\/\/chaos.social\/@SylvieLorxu\/116178318289179917","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178050263113242","url":"https:\/\/social.coop\/@cwebber\/116178050263113242"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239479","source":"ActivityPub"}},"published":"2026-03-05T19:59:59+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/chaos.social\/@SylvieLorxu\/116178318289179917"},{"actor":{"id":"https:\/\/social.coop\/users\/cwebber","displayName":"Christine Lemmer-Webber","status_net":{"avatarLinks":[{"url":"https:\/\/gnusocial.jp\/avatar\/295917-original-tmp20241114200524.webp","rel":"avatar","type":"image\/webp","width":400,"height":400},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-48-20241114200524.webp","rel":"avatar","type":"image\/webp","width":48,"height":48},{"url":"https:\/\/gnusocial.jp\/avatar\/295917-24-20241114200524.webp","rel":"avatar","type":"image\/webp","width":24,"height":24}],"profile_info":{"local_id":"295917"}},"image":{"url":"https:\/\/gnusocial.jp\/avatar\/295917-96-20241114200524.webp","rel":"avatar","type":"image\/webp","width":96,"height":96},"objectType":"person","summary":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273","url":"https:\/\/social.coop\/@cwebber","portablecontacts_net":{"preferredUsername":"cwebber","displayName":"Christine Lemmer-Webber","note":"Executive Director of @spritely (but this is a personal account). I'm here to fix the Internet.ActivityPub co-author, co-host of @fossandcrafts@octodon.social. Lisp sourceress, decentralized network architect, occasional Blender artist. she\/her https:\/\/dustycloud.org\/Recently moved here from @cwebber@octodon.socialLovely banner sketch by @juliaro https:\/\/mastodon.art\/@juliaro\/114489465896761273"}},"content":"

I know some people are thinking \"well pulling off this kind of thing, it would have to be controlled with intent of a human actor\"<\/p>

It doesn't have to be.<\/p>

1. A human could *kick off* such a process, and then it runs away from them.
2. It wouldn't even require a specific prompt to kick off a worm. There's enough scifi out there for this to be something any one of the barely-monitored openclaw agents could determine it should do.<\/p>

Whether it's kicked off by a human explicitly or a stray agent, it doesn't require \"intentionality\". Biological viruses don't have interiority \/ intentionality, and yet are major threats that reproduce and adapt.<\/p>","generator":{"id":"tag:gnusocial.jp,2026-05-24:notice-source:ActivityPub","objectType":"application","status_net":{"source_code":"ActivityPub"}},"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178247543315049","object":{"id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178247543315049","objectType":"note","content":"

I know some people are thinking \"well pulling off this kind of thing, it would have to be controlled with intent of a human actor\"<\/p>

It doesn't have to be.<\/p>

1. A human could *kick off* such a process, and then it runs away from them.
2. It wouldn't even require a specific prompt to kick off a worm. There's enough scifi out there for this to be something any one of the barely-monitored openclaw agents could determine it should do.<\/p>

Whether it's kicked off by a human explicitly or a stray agent, it doesn't require \"intentionality\". Biological viruses don't have interiority \/ intentionality, and yet are major threats that reproduce and adapt.<\/p>","url":"https:\/\/social.coop\/@cwebber\/116178247543315049","status_net":{"notice_id":null},"inReplyTo":{"objectType":"note","id":"https:\/\/social.coop\/users\/cwebber\/statuses\/116178200387730765","url":"https:\/\/social.coop\/@cwebber\/116178200387730765"}},"to":[{"objectType":"http:\/\/activitystrea.ms\/schema\/1.0\/collection","id":"http:\/\/activityschema.org\/collection\/public"}],"status_net":{"conversation":"tag:gnusocial.jp,2026-03-05:objectType=thread:nonce=194d81b43b540b8b","notice_info":{"local_id":"12239373","source":"ActivityPub"}},"published":"2026-03-05T19:36:47+00:00","provider":{"objectType":"service","displayName":"GNU social JP","url":"https:\/\/gnusocial.jp\/"},"verb":"post","url":"https:\/\/social.coop\/@cwebber\/116178247543315049"}],"links":[{"url":"https:\/\/gnusocial.jp\/conversation\/6210273","rel":"alternate","type":"text\/html"}]}