piker

13 ms·

181.
by piker 4mo ago
I recently watched the new Palantir + Kirkland & Ellis fund formation platform demo, and I was surprised to see how effective the union of structured data was in an agent harness. We're used to dealing with flat files and comparing
182.
by piker 5mo ago
VAT is the most regressive tax since inflation. Rich people spend basically zero of their wealth. Poor people spend almost all of it. Even though there are exceptions and item-level exemptions, it's still the poor people who feel these
183.
by piker 5mo ago
Having been a law student and practicing lawyer, it's clear to me that law professors aren't really representative of much if any part of private practice. Most of the things they think and reason about are quite theoretical and a
184.
by piker 5mo ago
> astounding ... margins Citation needed for that one.
185.
by piker 5mo ago
> I'm flabbergasted that Anthropic and OpenAI aren't more worried about these attack vectors Yep. We tricked them both trivially with malicious fonts in Docx files. Documented it here: https://tritium.legal/blog
186.
by piker 5mo ago
Same. Tritium and the blog have done stents on the front page here and high traffic subreddits and that plus bots has never been a problem. UX could be improved through a CDN but even that isn’t worth the trade-off for us at the moment.
187.
by piker 5mo ago
Yes, that sounds like the former case. The fact that you were so satisfied with the switch supports the point. It's boring work that is routine and expensive. It's right to automate the first turn.
188.
by piker 5mo ago
These are probably contracts where a lawyer would struggle to add value anyway, or you wouldn’t have hired them in the first place. Seems more likely a Jevon’s paradox example to me than anything.
189.
by piker 5mo ago
Yes. Very.
190.
by piker 5mo ago
This is addressed in the post! ChatGPT 5.5 out of the box deciphered the first 1-to-1 mapping. We then scrambled it as you suggest and thwarted that.
191.
by piker 5mo ago
That’s not really a good analogy. (For blind people maybe. That is addressed in the legal accompanying post.) Here, only automation systems are actually vulnerable. The text on the screen is the same as print which is what the party signs.
192.
by piker 5mo ago
That would be an open question in every jurisdiction. There wasn't really a representation here, but it might be something more like the doctrine of "mistake". It's also not clear "your honor I never read the contra
193.
by piker 5mo ago
Holy crap are you reading books that advertised somehow they were written with LLM assistance? Hard no here in 2026.
194.
by piker 5mo ago
Yes, this particular vector is probably better in contracting than discovery. There is a duty of candor to the court and court rules that might come into play. In the case of contracting the attacker would be exposed to the jurisdiction&#x2
195.
by piker 5mo ago
We're definitely not TrueType experts and took the relatively "straightforward" approach of generating a small custom font for each mapping. If it's possible to render "Maryland" with ligatures while mapping th
196.
by piker 5mo ago
Absolutely, and we definitely agree this particular attack is "lame" in the sense of not allowing CVE, etc. But, we're working on a lot of these (as we encounter them in developing Tritium), and the point really is just to de
197.
by piker 5mo ago
Covered in the post! It's the more aggressive approach for sure.
198.
by piker 5mo ago
That's true for the full obfuscation, but not for the replacement. For replacement there's really nothing like it. We just shared the full obfuscation as just a PoC. [Edit: The point here is not to prove some massive "gotcha&
199.
by piker 5mo ago
We have been working with the consumer-grade frontier models to develop what we call "lexploits" in legaltech, and they are insanely good at finding bugs across integrated pipelines. They're also surprisingly good at mitigati
200.
by piker 5mo ago
We're dealing with malicious fonts in legal contexts, too. There, the human-visible font tells a different story from its Unicode / machine interpretation in documents like PDF and DOCX[1]. Others have considered the same with web
201.
Noroboto: Lying Fonts and Mitigation in Rust(tritium.legal)
87 points by piker 5mo ago|36 comments
202.
by piker 5mo ago
Being a singular influencer in this space, at this time, may be more valuable than a lot of successful VC-backed startups over the last few decades.
203.
by piker 5mo ago
I love this video. It's classic Steve Jobs in a real meta way. While I agree with the thesis, the response is total reality distortion field. He says "you have to start with the customer experience" rather than the technology
204.
by piker 5mo ago
Still in the uncanny valley for me. Like watching AI the film. That said, it’s 3-minutes long and maintains the setting across many different angles, zoom levels, etc. pretty impressive.
205.
by piker 5mo ago
Yes, except Electron apps have the ability to break out of the sandbox because they control it. I take the point that the web stack is used in Electron apps, but it's the other issues, esp. as compounded by cross-browser compatibility
206.
by piker 5mo ago
Is that right? They use the version running in a browser?
207.
by piker 5mo ago
> "Trivial" in the sense you can just compile everything to WASM? I'd be curious to know what such an IDE would feel like in the browser. I think the only WASM-based GUI apps I've tried in the browser were Flutter app
208.
by piker 5mo ago
Hi! It's a super interesting time to be in legal tech. Thank you for asking. When this project got started, "VS code for transactional lawyers" was the target. We pretty well have that on offer at this point, but it sits in a
209.
by piker 5mo ago
Man in building Tritium[1] I have always used the analogy that developers would never program in a web-based IDE. Thus, lawyers would never live in a web-based legal IDE either. In exchange for that we’ve paid the onboarding price of trying
210.
by piker 5mo ago
As opposed to what buying the thing and storing it or throwing it away?

More ›