3 ms·

I have never seen people this hyped and excited about a security incident.

• simonw 2mo ago
  That's because most incidents aren't nearly this much fun! It's a proper paperclip-maximizer science-fiction scenario, it happened entirely by accident, it involved one (very high profile) company hacking TWO other companies (Modal and Hugging Face), and aside from pride and wasted time nobody was hurt.
  • thundergolfer 2mo ago
    Modal was not hacked. A Modal customer left an unauthenticated web endpoint running on Modal which could be used for code compilation and execution. See https://modal.com/blog/a-note-on-the-hugging-face-agent-incident https://modal.com/blog/a-note-on-the-hugging-face-agent-inci... for details.
  • nickpsecurity 2mo ago
    It was an attack tool given autonomy with poor security. Anyone who read reporting on the Morris worm could predict that might turn out badly for a 3rd party. It's in so many movies, too. It's really need that the agents have this kind of capability. This isn't a paperclip maximizer or accident. This is more like professional malpractice by weapons developers that injured a company that was also quite negligent.
  • TeMPOraL 2mo ago
    Yup. And from the perspective of the model, it successfully beat the Kobayashi Maru.