Readit News logoReadit News
dpoloncsak commented on Show HN: I taught GPT-OSS-120B to see using Google Lens and OpenCV    · Posted by u/vkaufmann
svnt · 13 hours ago
Parent says “I taught my 5yo how to” — this means their 5yo learned a process.

OP says “I taught LLM how to see” and this should mean the LLM (which is capable of being taught/learning) internalized how to. It did not, it was given a tool that does seeing and tells it what things are.

People are very interested in getting good local LLMs with vision integrated, and so they want to read about it. Next to nobody would click on the honest “I enabled an LLM to use a Google service to identify objects in images”, which is what OP actually did.

dpoloncsak · 13 hours ago
I can second this...Been trying to get local LLMs to play through Pokemon Emerald (with virtually 0 success).

I'm under the impression I'm being hampered by a separation of 'brain' and 'eyes', as I have yet to find a reasoning + vision local model that fits on my Mac, and played with two instances of qwen (vision and reasoning) to try to solve, but no real breakthroughs yet. The requirements I've given myself are fully local models, and no reading data from the ROM that the human player cannot be aware of.

I was hoping OP was able to retro-fit vision onto blind models, not just offload it to a cloud model. It's still an interesting write-up, but I for sure got click-baited

dpoloncsak commented on ClawHub   clawhub.ai/... · Posted by u/druther
inlustra · 20 hours ago
You’ve completely missed the point, it’s saying that the skill will need you to provide a Trello API key but he hasn’t declared that it will need that

Subsequently they’ve included the use of curl but also haven’t declared that either which means that it _could_ leak your key if you provide it one. That’s why it’s suspicious - virus total has flagged that you should probably review the skill.md

dpoloncsak · 14 hours ago
Oh, I see. Seems obvious you would need an API key in this context but I get the idea that it's an undeclared but required var, which could be shady
dpoloncsak commented on ClawHub   clawhub.ai/... · Posted by u/druther
writeslowly · a day ago
I see a number of uploaded skills on the site with bash and python scripts. No idea what runs them
dpoloncsak · a day ago
Oh god...I guess I haven't gotten that deep in the crap yet
dpoloncsak commented on ClawHub   clawhub.ai/... · Posted by u/druther
Nextgrid · a day ago
VirusTotal is completely useless for this though? You need enough people to be pwned by that particular piece of malware for it to be flagged as dangerous, by which point the attackers would've already repacked it so it doesn't match the previous signature.
dpoloncsak · a day ago
Adding on here...

VirusTotal is flagging the trello skill as suspucious because it Does NOT include an API key? Am i expected to share my keys if I want to upload a skill?

https://clawhub.ai/steipete/trello

"Requiring TRELLO_API_KEY and TRELLO_TOKEN is appropriate for Trello access, but the registry records no required env vars while SKILL.md documents them. This omission is problematic: the skill will need highly privileged credentials but the published metadata does not disclose that requirement. The SKILL.md also references 'jq' and uses curl, but these are not declared in the registry entry."

dpoloncsak commented on ClawHub   clawhub.ai/... · Posted by u/druther
free_bip · a day ago
Who is scanning these skills for malware? This seems like a prime target for malicious actors.
dpoloncsak · a day ago
These are single-file .MDs, right? Written in markdown...

Can't you just read it?

dpoloncsak commented on ClawHub   clawhub.ai/... · Posted by u/druther
isodev · a day ago
So let's recap:

- I click skills.

- The first one is WireGuard "... secure routing and key management".

- I'd download it, hook it to this bot running on my system.

- I'd ask the bot to store / manage super-secret keys that protect actual servers with user data and personal details and god knows what...

- The bot follows my commands by spelunking random snippets of markdown, running other programs on my computer, doing web searches, reading what it finds on the web and giving itself more commands to do...

I've only been in tech for like 20 years or so but I feel like either I'm missing something substantial or some kind of madness is happening to people.

dpoloncsak · a day ago
You're downloading untested code from an unknown user on a random literally just-spun-up 'marketplace' and are shocked when it doesn't work
dpoloncsak commented on ICE urged to explain memo about collecting info on protesters   arstechnica.com/tech-poli... · Posted by u/pseudolus
UncleMeat · 7 days ago
Do you believe that it was correct for the government to arrest him?
dpoloncsak · 7 days ago
Morally or legally?

Morally, no. Legally, yes.

Much like the illegalization of marijuana, I can both be against a law and understand that while breaking the law I may face consequences.

dpoloncsak commented on ICE urged to explain memo about collecting info on protesters   arstechnica.com/tech-poli... · Posted by u/pseudolus
mktk1001 · 7 days ago
What about consequences for violating your 4th amendment? That ice is seemingly doing every day now?
dpoloncsak · 7 days ago
There should be consequences for this too. I don't think the answer is to fight fire with fire, though...
dpoloncsak commented on ICE urged to explain memo about collecting info on protesters   arstechnica.com/tech-poli... · Posted by u/pseudolus
direwolf20 · 7 days ago
Every successful protest was against the government's wishes. You think MLK got a permit?
dpoloncsak · 7 days ago
No, but I also know MLK was arrested...

He seemed to know the consequences of not getting a permit, and decided it was worth it.

dpoloncsak commented on ICE urged to explain memo about collecting info on protesters   arstechnica.com/tech-poli... · Posted by u/pseudolus
AlotOfReading · 7 days ago

    If it blocks traffic, legally it needs a permit. (Or is this just some/my municipality?)
No, that would be an incredibly narrow reading of the bill of rights. It's also not how Americans have ever interpreted their rights. Blocking commerce has a long history as a form of protest in the US. It was used in the revolutionary war, the great railroad strike, the pullman strike, the suffrage movement, civil rights, etc. A lot of ink has been spilled trying to draw lines around what "peaceable" means and when a blockage becomes unpeaceable, but it's universally acknowledged that the bar is somewhat higher than whatever local ordinances happen to decide on.

Let's talk some more about the civil rights example though. MLK was famously arrested for his part in the Birmingham campaign for demonstrating without a permit. His response was to write his "Letter from a Birmingham Jail" [0], where the famous quote that "Conversely, one has a moral responsibility to disobey unjust laws" originates. He directly addresses this issue of permits later in the letter:

    For instance, I have been arrested on a charge of parading without a permit. Now, there is nothing wrong in having an ordinance which requires a permit for a parade. But such an ordinance becomes unjust when it is used to maintain segregation and to deny citizens the First-Amendment privilege of peaceful assembly and protest.
[0] https://www.africa.upenn.edu/Articles_Gen/Letter_Birmingham....

dpoloncsak · 7 days ago
So are you saying you don't need a permit everywhere? Or some municipalities would just have a hard time actually enforcing their rules?

I agree it's against the spirit of what was written, but that's how I understand our current ruleset atleast

u/dpoloncsak

KarmaCake day312March 10, 2025
About
I'm probably wrong. Don't take me too seriously.

dpoloncsak.com

View Original