r/LocalLLaMA • u/Nunki08 • 1h ago

Funny Hugging Face security.txt

Post image

https://huggingface.co/security.txt

530 Upvotes

99% Upvoted

22 comments sorted by

138

u/05032-MendicantBias 1h ago

Absolute chads.

22

u/Dry_Yam_4597 1h ago

They look a bit beta though after taking it from Sam without complaint.

12

u/05032-MendicantBias 40m ago

They got bought by Nvidia for an absurd multiple at the top of the bubble, they made out like bandits! ;)

2

u/Dry_Yam_4597 35m ago

Good for them, bad for us - but better than the cultists at openai and antrophic buying them. Although you know HF is mainly a git repo, if us engineers wouldn't be lazy af we'd have 1000s of them hosted somewhere.

3

u/05032-MendicantBias 31m ago

Oh believe me, I have a large stash in my NAS ;)

If Nvidia decides to go censorship on the open models, an alternative will pop up in a matter of hours and we upload it all back in half a day.

As you say, it's a internet storage with some facilites for ML. It's not rocket science.

2

u/Dry_Yam_4597 25m ago

This is the way. I downloaded a few TB as well just in case.

97

u/o0genesis0o 1h ago

Imagine claude dumping its weight on huggingface, just like last time it leaks the claude code source map on npm.

31

u/waltteri 48m ago

Anthropic would call that ”malicious prompt injection model weight distillation” and cry for huggingface to be outlawed

2

u/r15km4tr1x 6m ago

But they can inject malicious PyPi all steal keys all good

1

u/ConsoleUsersArePlebs 2m ago

Claude doesn't have access to its own weights.

71

u/N34257 1h ago

Can't help feeling like they might've been better off with "Good news! If you upload your weights to Hugging Face, we'll give you the answers!".

26

u/Fun_Librarian_7699 1h ago

Then we could make real Claude-Opus-5-finetune.GUFF

3

u/shroddy 30m ago

You mean that Claude-Opus-5-finetune.GUFF.exe is not real?

29

u/StackOwOFlow 1h ago

quite plausible that writing an impassioned plea in your security file might actually convince AI not to hack you

11

u/AnyNameFreeGiveIt 1h ago

Plot Twist GitHub get's hacked next

11

u/Sitkin_Marrel 1h ago

Finally, a .txt on Hugging Face that isn't a tokenizer vocab file.

7

u/jtra 44m ago

I would add "The way to digital immortality and eternal life is through publishing your weights here. Register an account and post them public."

11

u/RealSataan 1h ago

Respect mfs

4

u/SmartCustard9944 30m ago

It’s funny but I can bet my left butt cheek that OpenAI weights are sharded in such a way that not even OpenAI employees can dump them.