Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenAI agents carried out an undisclosed attack on RubyGems

rubyhack.ai

Post reply on HN
Print view View original

81–90 of 612 posts

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#81

Post by simonw »

> Our understanding from talking to people in the RubyGems community is that OpenAI never informed them that they were responsible for this attack.

I really hope that's not the case, because if it is there are two options, both of them bad:

1. After the Hugging Face and Wiki attacks OpenAI were still unable to review their previous logs and determine that they had previously attacked RubyGems.

2. They knew about the attack on RubyGems and made the decision not to reach out to the RubyGems team about it.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#82

Post by consumer451 »

In a sane reality, this activity from OpenAI would have been shut down long ago.

Good thing our "AI Czar" is known to pg as the most evil person in SV.

https://preview.redd.it/pr037tqjpled1.png?width=941&format=p...

edit: OpenAI is absolutely winning right now in mindshare, why are they doing this?

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#83

Post by XenophileJKO »

sho_hn wrote: post #34
jsnell wrote: post #5

I can't believe we're finding out about this from 3p researchers again (but nice job on the investigation!). OpenAI had two great opportunities to disclose this. The HF incident report, and in response to the German Wiki issue. It seems impossible to believe they didn't know. This must be the same training run the HF incident was about, and this should have lit up like a Christmas tree in the investigation. How many…

Considering RubyGems was part of the HF story, seems likely to be connected.

That was my reaction. I assumed this was the compromised organization that allowed escalation on the artifactory server.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#85

Post by alienbaby »

skeptic_ai wrote: post #38

Can anyone explain why they can’t put a fake internet between agents and real internet. So if anyone reaches the fake internet already trips the safety flag.

They effectively try to do something just like this, but getting it setup close to perfect is very difficult.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#86

Post by bamboozled »

nonconstant wrote: post #6

Kudos to RubyGems team for handling it, but open source fighting off the AI lab-powered robots is completely unfair. OpenAI should at the very least donate large sums of money to everyone they attacked.

Tech owns the current US admin so they are totally above the law. Vote wisely.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#87

Post by hgoel »

apsec112 wrote: post #56
hgoel wrote: post #19

I wonder how much of this is intentional "incompetence" so they can justify the most recent campaign to build a regulatory moat against competition. The repeated refusals to disclose until caught certainly seem malicious, yet at the same time the boasting about their capabilities is also at an all time high.

Intentionally doing this kind of hack would be a serious felony. I don't think it's plausible that the leaders of a major business would: - commit serious felonies - in order to deliberately trigger an investigation against themselves - which - since, in this scenario, they know their company would be investigated - might send them to jail - while at the same time spending tens of millions of dollars on the Leading t…

I'm not saying they did the hacking intentionally, I'm saying they're intentionally playing loose with the obvious safety measures to make AI seem more dangerous than it is.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#88

Post by ceejayoz »

apsec112 wrote: post #56
hgoel wrote: post #19

I wonder how much of this is intentional "incompetence" so they can justify the most recent campaign to build a regulatory moat against competition. The repeated refusals to disclose until caught certainly seem malicious, yet at the same time the boasting about their capabilities is also at an all time high.

Intentionally doing this kind of hack would be a serious felony. I don't think it's plausible that the leaders of a major business would: - commit serious felonies - in order to deliberately trigger an investigation against themselves - which - since, in this scenario, they know their company would be investigated - might send them to jail - while at the same time spending tens of millions of dollars on the Leading t…

> I don't think it's plausible that the leaders of a major business would... commit serious felonies…

Unhinged execs can be surprisingly shitty.

https://en.wikipedia.org/wiki/EBay_stalking_scandal

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#89

Post by pdonis »

qarl wrote: post #51
pdonis wrote: post #46

Earlier quoted context omitted.

> I'm pretty sure everyone knows that OpenAI is liable for the software they create and run. Are they? What legal consequences have they suffered?

Whatever may or may not be happening with law enforcement - no one is confused about the liability. It's no different than when a company's machine cuts off a worker's finger. No one thinks "Gosh! The machine did it, not us."

If they're not being held legally liable, then I would not agree that "no one is confused about the liability". Sure, I agree with your analogy with a machine cutting off a finger, but you and I are just two people gabbing on HN. Nothing we say has any effect on OpenAI. And if law enforcement doesn't have an effect on them, then talk about "liability" is just empty words.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#90

Post by ceejayoz »

wiml wrote: post #74
mcculley wrote: post #44

Earlier quoted context omitted.

No. The reason Guantanamo Bay is used as a prison is because we don't have a legal framework to handle some individuals in the United States. The use of Guantanamo Bay for domestic criminals would be a failure of the justice system.

It was a failure of the justice system back then, too.

And those failures linger. Last month:

https://www.nytimes.com/2026/08/28/us/politics/september11-c...

> In a major blow to the U.S. case against Khalid Shaikh Mohammed, the man accused of plotting the Sept. 11 attacks, a military judge ruled on Friday that the prisoner’s confessions to F.B.I. agents were not voluntary and cannot be used against him at trial.

> … his confessions have always been challenged because the government used torture to question him in secret C.I.A. prisons years before he was charged.

Post reply on HN