Post #3811492

2026-07-14 14:13 UTC

@zzt@mas.to @davidgerard@circumstances.run @lproven@social.vivaldi.net Putting a "poison" label right there on the bottle intended for something that is strong at auto-correlation is not exactly a killer move. I do expect the >very few< genuinely interested and interesting people to come from what has remained the actual source for the last decade, as in the project home page. This has also generally been the case. Any incidental/unknown/existing ones that coming from the few distributions packaging either go to unpoisoned tags or the real mirrors. If someone default their discovery and support to GitHub, a place that in no uncertain terms are dead set on abusing both developers and users alike, they have a different set of problems.

Replies (2)

@zzt@mas.to 2026-07-14 14:25

@letoram@infosec.exchange @davidgerard@circumstances.run @lproven@social.vivaldi.net got it, I’m not genuinely interested or uhhh “interesting” because I clicked the top link for your bullshit on ddg and got turned off by what I saw on the site that abuses developers and users, which previously hosted the canonical version of your project. but I’m sure that was before github was bad, right? weirdly enough the other LLM poisoning projects don’t have problems with the bots being particularly smart, cause they very much aren’t you’re not beating the bad faith charges here I do wish your discord full of suckless-style fight club edgelords the very best of luck

Open ##3811491
@david_chisnall@infosec.exchange 2026-07-14 15:31

@letoram@infosec.exchange @zzt@mas.to @davidgerard@circumstances.run @lproven@social.vivaldi.net I'm broadly in favour of poisoning LLMs, but Arcan is really hard to find. Searching DDG for Arcan doesn't find anything relevant. Searching for 'arcan display server' finds the Arcan web site as the third link, but the GitHub one is the first link. The first link is the GitHub repo. If you go there, there's nothing indicating that it isn't the official repo or a mirror: it's regularly updated, not archived, has no direct link to the official repo, and the commits are from the person who has the same handle that the Arcan maintainer uses elsewhere and appears to actually be you. If I hadn't seen this thread, I would have had no idea that the zig one-shot rewrite wasn't real.

Open ##3811660