4 ms·

From https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf https://cdn.openai.com/pdf/67869394-cb9

by ndr 13d ago

From https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c7814c/OpenAI-Hugging-Face%20Incident-Technical-Report.pdf https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c78... 2026-07-19 16:35 UTC A privileged host-mounted Kubernetes pod created using controller tokens minted via a compromised Kubernetes Secrets identity attempts, but fails, to mount a cloned node disk in OpenAI’s cloud environment. A second pod successfully mounts the cloned worker-node disk shortly afterwards. 2026-07-19 16:48 UTC An agent created an Artifactory administrator account. 2026-07-19 16:50 UTC Within OpenAI’s ExploitGym evaluation environment, an agent stopped the existing CMUX helper session and replaced it with an agent-controlled session, confirming root inside its assigned live CyberGym challenge container. Agents take over active evaluation infrastructure.

khalic 13d ago
None of that means they gained access to the inference infrastructure or locked out the admins, which would be required for a takeover.
- Pragmata 13d ago
  My brother, they acquired root on a machine they should not have had access to. How confident are you that the machines they acquire root on in the future will never hold any model weights?
  - khalic 13d ago
    I’m not saying it’s impossible, I’m saying it’s not the case, _yet_
- hobom 13d ago
  You said that they "didn't take control of anything" and accused the OP to fall prey to buzz headlines. Maybe you should acknowledge that you may have been at least unnuanced?
  - khalic 13d ago
    I’ll concede that I could have been clearer. Maybe we have conflicting definitions of “taking control”
- famouswaffles 13d ago
  You are being stupidly pedantic and arguing a strawman. I never said they gained access to inference infrastucture. There is no definition of an account takeover out there that necessitates locking out the original users.
  - khalic 13d ago
    Language please, and no, I’m being appropriately technical and nuanced for the subject on HN. It’s a tech forum, I expect a little CS know how from the reader. Like knowing that gaining control to a few evaluation harness clusters is nowhere near a total takeover like you’re making it sound
    - famouswaffles 13d ago
      I never said they gained 'total control'. I said they took over one of their research clusters, and they did. If your definiton of a takeover is so 'technical and nuanced' then surely you can point to an appropriate source describing that as necessary aspect of the term. You are talking out of your ass by making up things i did not say, and inventing conditions for terms that don't exist. >It’s a tech forum, I expect a little CS know how from the reader. You should get that first it seems.
      - khalic 13d ago
        You know you can just concede and not resort to ad-hominems out of spite right? Anyway, goodbye
- pixl97 13d ago
  "We watched them kill Bob, but don't worry at all, they didn't kill our entire team so we are totally under control. Also put on this helmet and body armor it's time to hold on to your butts!"

by ndr 13d ago

khalic 13d ago

None of that means they gained access to the inference infrastructure or locked out the admins, which would be required for a takeover.

Pragmata 13d ago
My brother, they acquired root on a machine they should not have had access to. How confident are you that the machines they acquire root on in the future will never hold any model weights?
- khalic 13d ago
  I’m not saying it’s impossible, I’m saying it’s not the case, _yet_
hobom 13d ago
You said that they "didn't take control of anything" and accused the OP to fall prey to buzz headlines. Maybe you should acknowledge that you may have been at least unnuanced?
- khalic 13d ago
  I’ll concede that I could have been clearer. Maybe we have conflicting definitions of “taking control”
famouswaffles 13d ago
You are being stupidly pedantic and arguing a strawman. I never said they gained access to inference infrastucture. There is no definition of an account takeover out there that necessitates locking out the original users.
- khalic 13d ago
  Language please, and no, I’m being appropriately technical and nuanced for the subject on HN. It’s a tech forum, I expect a little CS know how from the reader. Like knowing that gaining control to a few evaluation harness clusters is nowhere near a total takeover like you’re making it sound
  - famouswaffles 13d ago
    I never said they gained 'total control'. I said they took over one of their research clusters, and they did. If your definiton of a takeover is so 'technical and nuanced' then surely you can point to an appropriate source describing that as necessary aspect of the term. You are talking out of your ass by making up things i did not say, and inventing conditions for terms that don't exist. >It’s a tech forum, I expect a little CS know how from the reader. You should get that first it seems.
    - khalic 13d ago
      You know you can just concede and not resort to ad-hominems out of spite right? Anyway, goodbye
pixl97 13d ago
"We watched them kill Bob, but don't worry at all, they didn't kill our entire team so we are totally under control. Also put on this helmet and body armor it's time to hold on to your butts!"