Login
You're viewing the discuss.systems public feed.
  • Oct 21, 2026, 12:24 PM

    one finding that i don't have the patience to chase down is that
    a) i am 95% sure that the network egress threat classifier has an LLM in the loop that evaluates the requested URL and other contextual metadata as part of the decision, and
    b) i am 25% sure that you can cause the classifier to itself receive a classifier refusal by giving it urls that look like prompt injections or biosafety triggers, and rather than either refusing the connection or opening an approval card, it causes a TLS failure.

    i have a ~60k/1 week sample confirming (a), (b) is flaky and trying to measure it locks up the instance

    💬 1🔄 1⭐ 8

Replies