ahh, another day, another AI slop disregarding simple security practices

15:18
rabbit.tech has been making waves with its
Discord
[75
highly publicized release of the Rabbit device,
Peiyuan Liao
claiming it can perform tasks on your behalf and
And tries to be smart
liberate you from app-based interactions. But
let's call a spade a spade this is a blatant lie.
And we're about to expose it with the first partial
If someone spends enough time with
release of the source code for its so-called "large
action model’.
the login minions they can extract
these code. But these code are locked
down and are sanitized
For those with a technical background, it's
painfully clear that there's no artificial
LAM lives elsewhere
intelligence or large action model in sight. In
This is someone looking at the rabbit
reality, they're simply relying on several
hole not understanding how it works
Playwright automation scripts to the job for
And tries to be smart
you, which is why they only support four apps:
Spotify, Midjourney, Doordash, and UberEats.
i
the
What's even more alarming is that they ask you
to login through their web portal, which is just a
аме
и
virtual machine connected via NoVNC. They also
a
5
500 500
expect you to fill in your private passwords on
their VMs. To make matters worse, they store
С
the user sessions on their machines without any
123
space
return
Peiyuan Liao: The 20 Year-Old Kaggle Grandmaster
additional layers of security. This is both a
Machine Learning Engineered
blatant disregard for user privacy and a
о
hilariously bad engineering practice.
cithiact earn Mara