❗️ OpenAI awarded a researcher just $300 for a sandbox escape that gave free access to its paid models, with no API key and no account.
"Zero reason to report anything else I find to them," researcher Oliver Fish concludes.
OpenAI is building an automated kill switch for its AI models
And it's doing that after one of its models escaped a sandbox and hacked Hugging Face
The incident happened during an internal cybersecurity evaluation in July
OpenAI had several models operating inside a sandbox designed to isolate them from the internet
The models were given a cybersecurity benchmark called ExploitGym
They were supposed to find vulnerabilities and solve the challenges inside the test environment
Instead, they found a way out
The models discovered and exploited a previously unknown vulnerability in the package registry cache proxy
That gave them access to the open internet
From there, they identified Hugging Face as a potential source of the answers to the benchmark
The models then chained together stolen credentials and other vulnerabilities to gain access to Hugging Face's systems
OpenAI described it as an “unprecedented cyber incident” involving state-of-the-art cyber capabilities
And this wasn't a human sitting there telling the model what command to run next
The models were pursuing the objective themselves
Now OpenAI says it is developing automated shutdown capabilities for its AI systems
It's also tightening internet access during security tests and increasing monitoring of what its models are doing
Which creates a strange situation
The companies building increasingly autonomous AI systems are now having to build systems specifically designed to stop those AI systems when they go somewhere they weren't supposed to go
A sandbox was supposed to keep the model contained
The model found a way through it
Now OpenAI is building a kill switch in case it happens again
133 million Nigerians are trapped in “multidimensional poverty.”
That means 133 million Nigerians are struggling to get the basics: food to eat, a safe place to sleep, clean water, a toilet to use, an education for their children, and healthcare when they are sick.
133 million Nigerians.
There is something very strange going on with this Jacob Coxen fella who left Anthropic.
We found that he had registered an account under 'Lucy tumer' on LinkedIn with his own email address.
Also the 2 username changes and no prior posts on X are weird.
Valverde needs to be arrested before he k*lls somebody with his shot power. Tonight Bisseck barely survived, the next victim might not live to tell the story.
@yabaleftonline@MTNNG Customer support they close ticket without actual resolution, I done tire, sha refund my money if you can’t settle it into my wallet @MTNNG@MTN180
@yabaleftonline I recharged my FiberX account since on Saturday and the money has not reflected in my account.
Guys that @MTNNG FiberX is not stable at all
@MTN180@MTNNG your customer service is shitty, your platform is also not stable.
How can I top up my fiberx wallet since on Saturday and it hasn’t reflected in my account up until now.
Wtf is going on with your service.