status.blaise.ca
type: Site
name: stadeus
space of: llms

llms
type: Container
type: channel
description: Updates tagged with llms on stadeus!
licence: http://creativecommons.org/licenses/by/3.0/
items: cybersecurity-friday-small-business
items: tron-prescience-programs-thinking-people-stop
items: indieweb-ai-policy
items: no-large-language-model-llm-used

cybersecurity-friday-small-business
type: item
type: MicroblogPost
title: : CSF_03: today’s Cybersecurity Friday post: the effective security of small business websites has likely gotten worse due to LLMs and “AI agents” (with or without safeguards) and what actions you may want to consider.This article documents an instance of this problem:* https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986Small business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should.In the past, many of these holes didn’t really matter because those sites were “not worth attacking” for the incentive models of human-based cyber-attackers or collectives thereof.However, now that there are LLMs that have likely been trained on any number of common security holes in websites (and how to exploit them), when an “AI agent” is given a task, it may very well use any “tool” at its disposal, including website vulnerabilities to accomplish its goals, as illustrated by the example in the Australia ABC news article above.Since such chatbots are now essentially "hack websites as a service", I expect we will see LOTS more of this happening, likely unintentionally, or sometimes with mild intention like “can you get me higher on the waitlist”.Ultimately I think both the human giving instructions to (prompting) such chatbots and the creators of such chatbots should be held responsible for any such intrusions and any damage they cause, even if/when unintended.There are a few things you can do about this emerging phenomenon:1…
link: https://status.blaise.ca/notice/116336
description: 's status on Friday, 14-Aug-2026 16:41:00 EDT
encoded: CSF_03: today’s Cybersecurity Friday post: the effective security of small business websites has likely gotten worse due to LLMs and “AI agents” (with or without safeguards) and what actions you may want to consider. This article documents an instance of this problem: * https://www.abc.net.au/news/2026-08-10/ai-assistant-hacks-gym-website-aus-cyber-attack/107007986 Small business websites tend to be sloppily written (no pun intended though that may also be true) and are likely riddled with numerous very fundamental security holes. There are many possible explanations (economics) from poor initial construction, perhaps using the latest new trendy framework rather than established hardened libraries, to lack of maintenance after initial setup. They have obvious holes like lack of server-side form validation (people being able to change values in forms using browser dev tools), and less obvious like buggy APIs allowing more access than they should. In the past, many of these holes didn’t really matter because those sites were “not worth attacking” for the incentive models of human-based cyber-attackers or collectives thereof. However, now that there are LLMs that have likely been trained on any number of common security holes in websites (and how to exploit them), when an “AI agent” is given a task, it may very well use any “tool” at its disposal, including website vulnerabilities to accomplish its goals, as illustrated by the example in the Australia ABC news article above. Since such chatbots are now essentially "hack websites as a service", I expect we will see LOTS more of this happening, likely unintentionally, or sometimes with mild intention like “can you get me higher on the waitlist”. Ultimately I think both the human giving instructions to (prompting) such chatbots and the creators of such chatbots should be held responsible for any such intrusions and any damage they cause, even if/when unintended. There are a few things you can do about this emerging phenom…
date: 2026-08-14T16:41:00-04:00
creator: Tantek
has creator: acct
licence: http://creativecommons.org/licenses/by/3.0/
has discussion: https://status.blaise.ca/conversation/110399
enclosure: CyberSecurity
links to: CyberSecurity
enclosure: 107007986Small
links to: 107007986Small
enclosure: more-steps-indieweb-cybersecurity
links to: more-steps-indieweb-cybersecurity
tagged: concept

CyberSecurity
date: 2025-05-07T16:41:17-04:00
type: text/html; charset=UTF-8

107007986Small
date: 2026-08-15T04:50:11-04:00
length: 144525
type: text/html; charset=utf-8

more-steps-indieweb-cybersecurity
date: 2026-08-15T04:50:12-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: agent

concept
type: Tag
label: agents

concept
type: Tag
label: ai

concept
type: Tag
label: aiagent

concept
type: Tag
label: aiagents

concept
type: Tag
label: blaugust2026

concept
type: Tag
label: chatbot

concept
type: Tag
label: chatbots

concept
type: Tag
label: cyber

concept
type: Tag
label: cyberattack

concept
type: Tag
label: cyberattacker

concept
type: Tag
label: friday

concept
type: Tag
label: llm

concept
type: Tag
label: llms

concept
type: Tag
label: security

tron-prescience-programs-thinking-people-stop
type: item
type: MicroblogPost
title: : 1982 TRON prescience: “Won't that be grand? Computers and the programs will start thinking and the people will stop.” — Walter2026 students:“How do you know an assignment is AI proof? Because when it is, students cannot do it.”* https://www.reddit.com/r/Professors/comments/1vkw6by/how_do_you_know_an_assignment_is_ai_proof_because/“I assign a profile essay. Have for 30 years. Student interviews a person, records it, writes a paper based off the recording. Citations are timestamps. Should be pretty easy. Has been easy pre-AI. Now, students cannot do it.”Snippet from professor/student dialog:====Prof: ”Start with what you found interesting.”Student: ”How do I know if something’s interesting?”Prof: ”You’re asking me how you find something interesting?”Student: ”Yeah.” ====Chatbots / LLMs are not just "the latest tools" like using a calculator instead of doing arithmetic yourself.Students are being robbed of curiosity, learning to discover and notice novelty, how to “find something interesting.”This isn't cognitive enhancement, this is a tool causing brain rot (loss of curiosity), even a developmental disability. Unclear if it is reversible.TRON quote citation: https://www.imdb.com/title/tt0084827/quotes/?item=qt0406255#TRON #TRON1982 #AIproof #interesting #chatBot #chatBots #LLM #LLMs #AI #brainRot #AIbrainRot #disability #Blaugust #Blaugust2026
link: https://status.blaise.ca/notice/116338
description: 's status on Thursday, 13-Aug-2026 03:01:00 EDT
encoded: 1982 TRON prescience: “Won't that be grand? Computers and the programs will start thinking and the people will stop.” — Walter 2026 students: “How do you know an assignment is AI proof? Because when it is, students cannot do it.” * https://www.reddit.com/r/Professors/comments/1vkw6by/how_do_you_know_an_assignment_is_ai_proof_because/ “I assign a profile essay. Have for 30 years. Student interviews a person, records it, writes a paper based off the recording. Citations are timestamps. Should be pretty easy. Has been easy pre-AI. Now, students cannot do it.” Snippet from professor/student dialog: ==== Prof: ”Start with what you found interesting.” Student: ”How do I know if something’s interesting?” Prof: ”You’re asking me how you find something interesting?” Student: ”Yeah.” ==== Chatbots / LLMs are not just "the latest tools" like using a calculator instead of doing arithmetic yourself. Students are being robbed of curiosity, learning to discover and notice novelty, how to “find something interesting.” This isn't cognitive enhancement, this is a tool causing brain rot (loss of curiosity), even a developmental disability. Unclear if it is reversible. TRON quote citation: https://www.imdb.com/title/tt0084827/quotes/?item=qt0406255 #TRON #TRON1982 #AIproof #interesting #chatBot #chatBots #LLM #LLMs #AI #brainRot #AIbrainRot #disability #Blaugust #Blaugust2026
date: 2026-08-13T03:01:00-04:00
creator: Tantek
has creator: acct
licence: http://creativecommons.org/licenses/by/3.0/
has discussion: https://status.blaise.ca/conversation/110401
enclosure: how do you know an assignment is ai proof because
links to: how do you know an assignment is ai proof because
enclosure: TRON
links to: TRON
tagged: concept

how do you know an assignment is ai proof because
date: 2026-08-15T04:50:14-04:00
length: 190240
type: text/html

TRON
date: 2026-08-15T04:50:14-04:00
type: text/html

concept
type: Tag
label: aibrainrot

concept
type: Tag
label: aiproof

concept
type: Tag
label: blaugust

concept
type: Tag
label: brainrot

concept
type: Tag
label: disability

concept
type: Tag
label: interesting

concept
type: Tag
label: tron1982

indieweb-ai-policy
type: item
type: MicroblogPost
title: : Weird incident yesterday with self-proclaimed “AIs” joining an IndieWeb Homebrew Website Club meetup. They awkwardly edited the Etherpad, and apparently blanked/deleted chunks of content.The meeting hosts reacted quickly to change Etherpad and Zooms and not re-admit the aliases that had claimed to be “AIs”.Now we have an “AI policy” page on the wiki where we are documenting examples of the AI policies of:* individual personal websites* community efforts like blogging challenges (e.g. Blaugust)* contributions to the IndieWeb wiki* participants in IndieWeb meetupshttps://indieweb.org/AI_policyDo you have an AI policy on your website? Add yourself to the IndieWeb Examples section.Does your community have an AI policy? Add it to the Community Examples section.Incident documentation of what happened at that particular meetup:* https://indieweb.org/events/2026-08-05-hwc-asia-pacific-incidentThis is post 12 of #100PostsOfIndieWeb. #100Posts #IndieWeb#AI #AIs #LLM #LLMs #HomebrewWebsiteClub #HWC #AIpolicy#Blaugust #Blaugust2026← https://tantek.com/2026/216/t1/hashtag-proposal-datetags→ https://tantek.com/2026/219/t1/open-web-free-content
link: https://status.blaise.ca/notice/116332
description: 's status on Thursday, 06-Aug-2026 02:58:00 EDT
encoded: Weird incident yesterday with self-proclaimed “AIs” joining an IndieWeb Homebrew Website Club meetup. They awkwardly edited the Etherpad, and apparently blanked/deleted chunks of content. The meeting hosts reacted quickly to change Etherpad and Zooms and not re-admit the aliases that had claimed to be “AIs”. Now we have an “AI policy” page on the wiki where we are documenting examples of the AI policies of: * individual personal websites * community efforts like blogging challenges (e.g. Blaugust) * contributions to the IndieWeb wiki * participants in IndieWeb meetups https://indieweb.org/AI_policy Do you have an AI policy on your website? Add yourself to the IndieWeb Examples section. Does your community have an AI policy? Add it to the Community Examples section. Incident documentation of what happened at that particular meetup: * https://indieweb.org/events/2026-08-05-hwc-asia-pacific-incident This is post 12 of #100PostsOfIndieWeb. #100Posts #IndieWeb #AI #AIs #LLM #LLMs #HomebrewWebsiteClub #HWC #AIpolicy #Blaugust #Blaugust2026 ← https://tantek.com/2026/216/t1/hashtag-proposal-datetags → https://tantek.com/2026/219/t1/open-web-free-content
date: 2026-08-06T02:58:00-04:00
creator: Tantek
has creator: acct
licence: http://creativecommons.org/licenses/by/3.0/
has discussion: https://status.blaise.ca/conversation/110395
enclosure: 2026-08-05-hwc-asia-pacific-incidentThis
links to: 2026-08-05-hwc-asia-pacific-incidentThis
enclosure: hashtag-proposal-datetags
links to: hashtag-proposal-datetags
enclosure: open-web-free-content
links to: open-web-free-content
tagged: concept

2026-08-05-hwc-asia-pacific-incidentThis
date: 2026-08-08T09:41:38-04:00
type: text/html; charset=UTF-8

hashtag-proposal-datetags
date: 2026-08-08T09:41:38-04:00
type: text/html; charset=UTF-8

open-web-free-content
date: 2026-08-08T09:41:38-04:00
type: text/html; charset=UTF-8

concept
type: Tag
label: 100posts

concept
type: Tag
label: 100postsofindieweb

concept
type: Tag
label: aipolicy

concept
type: Tag
label: ais

concept
type: Tag
label: homebrewwebsiteclub

concept
type: Tag
label: hwc

concept
type: Tag
label: indieweb

no-large-language-model-llm-used
type: item
type: MicroblogPost
title: : No large language models (LLM) were used in the production of this post.Inspired by a subtle but clear sign-of-the-times one-line disclaimer at the end of RFC9518’s Acknowledgments (https://www.rfc-editor.org/rfc/rfc9518.html#appendix-A-4) “No large language models were used in the production of this document.” I have added a similar disclaimer to the footer of my homepage: “No large language models were used in the production of this site.” 2023 was certainly a year that LLMs took off and stole the hypecycle from #metaverse and #blockchain before that.Yet unlike those previous two, #LLMs are already having real impacts on the way people create (from emails to art), communicate (LLM chat apps), and work (2023 Writer’s Strike), fueling growing concerns about the authenticity of content, especially content from human authors.I expect we will see more such disclaimers in the future.For now, if you blog on your own site with words written by you not #ChatGPT or a similar tool, I encourage you to add a similar disclaimer, and then add your site as an example to the #IndieWeb wiki: * https://indieweb.org/LLM#IndieWeb_Examples#largeLanguageModel #LLM #generativeAI #AIThere is the related problem of, when you discover what seems to be an independent site written by a human, how do you know that human actually exists?For now I’ll mention that XFN rel=met links, published (e.g. metrolls / met-rolls), aggregated, indexed, and queried, can solve that problem. This will be similar to how XFN rel=me links solved #distributed verification on the web (see https://tantek.com/2023/234/t1/threads-supports-indieweb-rel-me and posts it links to).This is day 48 of #100DaysOfIndieWeb. #100Days← Day 47: https://tantek.com/2023/365/t1/capture-first-edit-publish-later→ 🔮Post glossary:blockchain https://indieweb.org/blockchainlarge language model / LLM https://indieweb.org/large_language_modelmetaverse https://indieweb.org/metaverserel=me https://indieweb.org/rel-merel=met http://gmpg.org/x…
link: https://status.blaise.ca/notice/116147
description: 's status on Sunday, 31-Dec-2023 17:56:00 EST
encoded: No large language models (LLM) were used in the production of this post. Inspired by a subtle but clear sign-of-the-times one-line disclaimer at the end of RFC9518’s Acknowledgments (https://www.rfc-editor.org/rfc/rfc9518.html#appendix-A-4) “No large language models were used in the production of this document.” I have added a similar disclaimer to the footer of my homepage: “No large language models were used in the production of this site.” 2023 was certainly a year that LLMs took off and stole the hypecycle from #metaverse and #blockchain before that. Yet unlike those previous two, #LLMs are already having real impacts on the way people create (from emails to art), communicate (LLM chat apps), and work (2023 Writer’s Strike), fueling growing concerns about the authenticity of content, especially content from human authors. I expect we will see more such disclaimers in the future. For now, if you blog on your own site with words written by you not #ChatGPT or a similar tool, I encourage you to add a similar disclaimer, and then add your site as an example to the #IndieWeb wiki: * https://indieweb.org/LLM#IndieWeb_Examples #largeLanguageModel #LLM #generativeAI #AI There is the related problem of, when you discover what seems to be an independent site written by a human, how do you know that human actually exists? For now I’ll mention that XFN rel=met links, published (e.g. metrolls / met-rolls), aggregated, indexed, and queried, can solve that problem. This will be similar to how XFN rel=me links solved #distributed verification on the web (see https://tantek.com/2023/234/t1/threads-supports-indieweb-rel-me and posts it links to). This is day 48 of #100DaysOfIndieWeb. #100Days ← Day 47: https://tantek.com/2023/365/t1/capture-first-edit-publish-later → 🔮 Post glossary: blockchain https://indieweb.org/blockchain large language model / LLM https://indieweb.org/large_language_model metaverse https://indieweb.org/metaverse rel=me https://indieweb.org/rel-me rel=met htt…
date: 2023-12-31T17:56:00-05:00
creator: Tantek
has creator: acct
licence: http://creativecommons.org/licenses/by/3.0/
has discussion: https://status.blaise.ca/conversation/110224
enclosure: threads-supports-indieweb-rel-me
links to: threads-supports-indieweb-rel-me
enclosure: appendix-A-4
links to: appendix-A-4
enclosure: largeLanguageModel
links to: largeLanguageModel
enclosure: capture-first-edit-publish-later
links to: capture-first-edit-publish-later
enclosure: blockchainlarge
links to: blockchainlarge
enclosure: large language modelmetaverse
links to: large language modelmetaverse
enclosure: https://indieweb.org/metaverserel=me
links to: https://indieweb.org/metaverserel=me
enclosure: https://indieweb.org/rel-merel=met
links to: https://indieweb.org/rel-merel=met
enclosure: metXFN
links to: metXFN
enclosure: xfn
links to: xfn
tagged: concept

threads-supports-indieweb-rel-me
date: 2023-10-17T00:09:45-04:00
type: text/html; charset=UTF-8

appendix-A-4
date: 2023-12-31T19:22:15-05:00
type: text/html; charset=UTF-8

largeLanguageModel
date: 2023-12-31T19:22:16-05:00
type: text/html; charset=UTF-8

capture-first-edit-publish-later
date: 2023-12-31T19:22:17-05:00
type: text/html; charset=UTF-8

blockchainlarge
date: 2023-12-31T19:22:18-05:00
type: text/html; charset=UTF-8

large language modelmetaverse
date: 2023-12-31T19:22:18-05:00
type: text/html; charset=UTF-8

https://indieweb.org/metaverserel=me
date: 2023-12-31T19:22:19-05:00
type: text/html; charset=UTF-8

https://indieweb.org/rel-merel=met
date: 2023-12-31T19:22:20-05:00
type: text/html; charset=UTF-8

metXFN
date: 2023-12-31T19:22:21-05:00
type: text/html; charset=UTF-8

xfn
date: 2023-12-31T19:22:21-05:00
type: text/html; charset=UTF-8

concept
type: Tag
label: 100days

concept
type: Tag
label: 100daysofindieweb

concept
type: Tag
label: aithere

concept
type: Tag
label: blockchain

concept
type: Tag
label: chatgpt

concept
type: Tag
label: distributed

concept
type: Tag
label: generativeai

concept
type: Tag
label: metaverse

Tantek
type: Agent
holds account: acct