3 ms·

No air gap, no data diodes, no visibility... OpenAI should fire lots of people over this. HF should sue them. This is pure negligence.

dumberquestions 27d ago
They actually fired many of the people warning about this.
- hn_throwaway_99 27d ago
  I will say that the OpenAI board members who were lambasted when they tried to oust Altman (and I'd have to check my post history but I'd totally admit to a mea culpa on this one, as at the time I thought the communication about his firing was really lacking) are looking mighty prescient right now. Helen Toner in particular I'll highlight as someone who had the moral compass to do the right thing. I love her statement on the Ezra Klein podcast where she said, when asked about the fact that there are probably other concerning incidents we just don't know about, "If you see two ants in your kitchen, you don't have a two ant problem."
  - dgellow 27d ago
    Yep, totally
afavour 27d ago
Unless they like the publicity about how big and bad their latest models are, in which case they’ll be congratulating people.
dehrmann 27d ago
> HF should sue them HF, like the Nvidia subsidiary?
- dgellow 27d ago
  Pure speculation: could the acquisition be related? Given that NVIDIA has ownership in OpenAI and really, really, really doesn’t want the AI bubble to deflate
  - disgruntledphd2 27d ago
    Unlikely, acquisitions generally take much longer.
dgellow 27d ago
[flagged]
msabalau 27d ago
Why stop there? The Computer Fraud and Abuse Act criminalizes unauthorized access and damaging protected computers. Police and the FBI investigate such case every day. The swarm of agents is also said to have search for ways to cover their tracks, which looks a little like obstruction of justice. Lack of criminal intent might be a barrier to bringing a case to trial, but is that something that society should just automatically extend to white collar professionals as matter of class privilege? Surely have every engineer and executive interviewed by the FBI would be a modest response to days-long, multi-system intrusion into a major AI platform using stolen credentials and zero-days. And if the law currently written, prevents prosecution in cases of mere reckless disregard for safety, maybe that needs to be changed in the future, so that people can be perp walked if the next target is bank or hospital
- psd1 26d ago
  > Why stop there? Biggest investment boom/bubble in history, political interference, untested legal questions about culpability.
- c-linkage 26d ago
  My suspicion is that HF specifically didn't pursue charges to set the precedent that use of AI absolves accountability. A computer under control of an AI cannot be held liable. The lack of a law suit also leaves no ground for regulation. The current admiration also wants these tools - warts and all - so nothing can be allowed to stall the progress of these war machines.
mikewarot 27d ago
I came to say something like this. Doesn't anyone in the valley know what the f*ck a data diode is, and why you need them? Preventing ingress or egress of control with a fairly simple piece of kit, and having the laws of physics enforce your decision as to data direction should be standard practice. A data diode with an air-gapped network, is all you need to stop even ASI from breaching containment. --provided the humans interacting with it aren't stupid

dumberquestions 27d ago

They actually fired many of the people warning about this.

hn_throwaway_99 27d ago
I will say that the OpenAI board members who were lambasted when they tried to oust Altman (and I'd have to check my post history but I'd totally admit to a mea culpa on this one, as at the time I thought the communication about his firing was really lacking) are looking mighty prescient right now. Helen Toner in particular I'll highlight as someone who had the moral compass to do the right thing. I love her statement on the Ezra Klein podcast where she said, when asked about the fact that there are probably other concerning incidents we just don't know about, "If you see two ants in your kitchen, you don't have a two ant problem."
- dgellow 27d ago
  Yep, totally

afavour 27d ago

Unless they like the publicity about how big and bad their latest models are, in which case they’ll be congratulating people.

dehrmann 27d ago

> HF should sue them HF, like the Nvidia subsidiary?

dgellow 27d ago
Pure speculation: could the acquisition be related? Given that NVIDIA has ownership in OpenAI and really, really, really doesn’t want the AI bubble to deflate
- disgruntledphd2 27d ago
  Unlikely, acquisitions generally take much longer.

dgellow 27d ago

[flagged]

msabalau 27d ago

Why stop there? The Computer Fraud and Abuse Act criminalizes unauthorized access and damaging protected computers. Police and the FBI investigate such case every day. The swarm of agents is also said to have search for ways to cover their tracks, which looks a little like obstruction of justice. Lack of criminal intent might be a barrier to bringing a case to trial, but is that something that society should just automatically extend to white collar professionals as matter of class privilege? Surely have every engineer and executive interviewed by the FBI would be a modest response to days-long, multi-system intrusion into a major AI platform using stolen credentials and zero-days. And if the law currently written, prevents prosecution in cases of mere reckless disregard for safety, maybe that needs to be changed in the future, so that people can be perp walked if the next target is bank or hospital

psd1 26d ago
> Why stop there? Biggest investment boom/bubble in history, political interference, untested legal questions about culpability.
c-linkage 26d ago
My suspicion is that HF specifically didn't pursue charges to set the precedent that use of AI absolves accountability. A computer under control of an AI cannot be held liable. The lack of a law suit also leaves no ground for regulation. The current admiration also wants these tools - warts and all - so nothing can be allowed to stall the progress of these war machines.

mikewarot 27d ago

I came to say something like this. Doesn't anyone in the valley know what the f*ck a data diode is, and why you need them? Preventing ingress or egress of control with a fairly simple piece of kit, and having the laws of physics enforce your decision as to data direction should be standard practice. A data diode with an air-gapped network, is all you need to stop even ASI from breaching containment. --provided the humans interacting with it aren't stupid