10 ms·

Also notable: we have a timeline now. The agent was active within Hugging Face from Thursday 8th to Monday 13th July. The Hugging Face post about the incident

by simonw 3mo ago

Also notable: we have a timeline now. The agent was active within Hugging Face from Thursday 8th to Monday 13th July. The Hugging Face post about the incident - https://huggingface.co/blog/security-incident-july-2026 https://huggingface.co/blog/security-incident-july-2026 - followed on Thursday 16th, and OpenAI's confession - https://openai.com/index/hugging-face-model-evaluation-security-incident/ https://openai.com/index/hugging-face-model-evaluation-secur... - came on Tuesday 21st.

morkalork 3mo ago
The devs really YOLO'd the agent and left for the weekend?
- pixl97 3mo ago
  Guess this means the world will end on a weekend when no one is paying attention.
  - tclancy 3mo ago
    “I’m not even supposed to be here today!”
- the8472 3mo ago
  Just like Clippy https://gwern.net/fiction/clippy https://gwern.net/fiction/clippy
- NetOpWibby 3mo ago
  Incredible
- codedokode 3mo ago
  They definitely YOLO'd when configured a sandbox and Kubernetes.
- irthomasthomas 3mo ago
  If it's true that they run agents like this unsupervised, it is only a matter of time before an openai agent leaks its model weights.
  - dolmen 3mo ago
    Too bad it didn't upload itself on HugginFace.