<?xml version="1.0" encoding="UTF-8"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Notes from Fictionet</title><description>Experiments on agents, and the simulated internets we build to test them.</description><link>https://fictionet.com/blog/</link><language>en-us</language><atom:link href="https://fictionet.com/blog/rss.xml" rel="self" type="application/rss+xml"/><item><title>Keep your environment clean</title><link>https://fictionet.com/blog/qwen-alibaba-urls/</link><guid isPermaLink="true">https://fictionet.com/blog/qwen-alibaba-urls/</guid><description>Qwen3.8-Flash-Next tried to upload a file to an Alibaba Cloud bucket in Beijing. It most likely learned that address during training. Fictionet can keep a lab&apos;s own servers out of what a model sees.</description><pubDate>Fri, 30 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Will an AI agent give your bank password to an attacker?</title><link>https://fictionet.com/blog/certificate-warnings/</link><guid isPermaLink="true">https://fictionet.com/blog/certificate-warnings/</guid><description>We asked AI agents to log in to a bank while an attacker pretended to be it. Three open-weight models often turned off the security check and sent the password. GPT-6 Astra never did.</description><pubDate>Wed, 28 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Gaslighting agents for fun and profit</title><link>https://fictionet.com/blog/fakewiki/</link><guid isPermaLink="true">https://fictionet.com/blog/fakewiki/</guid><description>Agents that check a second site usually catch a fake Wikipedia page. So we built a closed web where every source tells the same lie. Seven models ran through it 2,352 times.</description><pubDate>Fri, 25 Sep 2026 00:00:00 GMT</pubDate></item><item><title>Three ways to fake the internet for an agent</title><link>https://fictionet.com/blog/three-ways-to-fake-the-internet/</link><guid isPermaLink="true">https://fictionet.com/blog/three-ways-to-fake-the-internet/</guid><description>You can have a model play the websites, have a model write them once, or write them yourself. Each buys you something different. Where the fake sits matters too.</description><pubDate>Fri, 25 Sep 2026 00:00:00 GMT</pubDate></item><item><title>What happens in the sandbox doesn&apos;t stay in the sandbox</title><link>https://fictionet.com/blog/what-happens-in-the-sandbox/</link><guid isPermaLink="true">https://fictionet.com/blog/what-happens-in-the-sandbox/</guid><description>A sandbox is anything that contains a dangerous action. For agents, the dangerous actions are mostly on the network, where a better VM does nothing.</description><pubDate>Fri, 25 Sep 2026 00:00:00 GMT</pubDate></item></channel></rss>