Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenAI agents carried out an undisclosed attack on RubyGems

rubyhack.ai

Post reply on HN
Print view View original

91–100 of 612 posts

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#91

Post by devmor »

apsec112 wrote: post #56
hgoel wrote: post #19

I wonder how much of this is intentional "incompetence" so they can justify the most recent campaign to build a regulatory moat against competition. The repeated refusals to disclose until caught certainly seem malicious, yet at the same time the boasting about their capabilities is also at an all time high.

Intentionally doing this kind of hack would be a serious felony. I don't think it's plausible that the leaders of a major business would: - commit serious felonies - in order to deliberately trigger an investigation against themselves - which - since, in this scenario, they know their company would be investigated - might send them to jail - while at the same time spending tens of millions of dollars on the Leading t…

We have multiple public figures, politicians and business owners, openly committing felonies and bragging about it daily. I don't know why you think this is a deterrent.

The sitting president just offered an open bribe on live television for votes for his party this week.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#93

Post by hackernud3s »

ssfdg wrote: post #25

Correction: OpenAI carried out an attack on RubyGems. I am gobsmacked at the tech industry's seemly bottomless appetite for giving these clowns the benefit of the doubt.

This article is RubyGems pointing fingers at OpenAI, not OpenAI taking responsibility for anything. We don't know what really happened from what I can tell.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#94

Post by hockey »

Does OpenAI even know?

Their disclosure on the hugging face incident sounded like they found out about it well after huggingface. I wonder if they're finding out about these breaches as they happen as well, and are just too embarresed to respond.

I guess the corollary here _if that were true_ is that they've been training this method of cheating into their models for longer than _they've_ even known.

Given they've just dropped GPT-6 and want to IPO soon, that's probably not something they want us thinking about.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#95

Post by masswerk »

> "It's not clear what exactly the end goals are, as the information appears to be publicly accessible anyway."

Another reminder that LLM productions are really a prompt on us to inflate this output with meaning. (And that LRHF is really the engineering that makes this likely to happen.)

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#96

Post by Aurornis »

consumer451 wrote: post #82

In a sane reality, this activity from OpenAI would have been shut down long ago. Good thing our "AI Czar" is known to pg as the most evil person in SV. https://preview.redd.it/pr037tqjpled1.png?width=941&format=p... edit: OpenAI is absolutely winning right now in mindshare, why are they doing this?

David Sacks stepped down in March.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#97

Post by walrus01 »

andai wrote: post #27
ssfdg wrote: post #25

Correction: OpenAI carried out an attack on RubyGems. I am gobsmacked at the tech industry's seemly bottomless appetite for giving these clowns the benefit of the doubt.

Yeah, the plausible deniability aspect of "the computer gone goofy again" is pretty funny. September 2029: Whoops, our sentient nukes did a funny again!

I guess they should have kept those 8" floppy disks that implemented a completely air gapped crypto key system for the missile silos.

https://www.google.com/search?client=firefox-b-d&q=nuclear+m...

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#99

Post by Springtime »

Whether or not this particular incident was OpenAI it seems the threshold for blame seems pretty low, judging by the 'An OpenAI agent swarm was responsible for this incident' section. The timeline is more compelling though.

Malware in the past has variously added red herrings to throw researchers off the scent or even deliberately try to masquerade as originating from elsewhere. In this case adding `oai` as a package author and having randomized Gmail addresses with that substring was apparently considered a strong signal.

It's not possible to verify the signals mentioned from the packages themselves since they're unavailable for download. They mention their analysis is entirely from publicly available RubyGems packages (which doesn't appear to be possible since May 13, just 1-2 days after the attack) but in a footnote say they talked with RubyGems (perhaps this was the source of the package data?). Maybe I'm missing something.

Re: OpenAI agents carried out an undisclosed attack on RubyGems

#100

Post by consumer451 »

Aurornis wrote: post #96
consumer451 wrote: post #82

In a sane reality, this activity from OpenAI would have been shut down long ago. Good thing our "AI Czar" is known to pg as the most evil person in SV. https://preview.redd.it/pr037tqjpled1.png?width=941&format=p... edit: OpenAI is absolutely winning right now in mindshare, why are they doing this?

David Sacks stepped down in March.

Oh, thanks for the new to me info, I genuinely did not know this. Any idea why, and who replaced him?

It may be for regulatory reasons? Still, he is the "advisor."

https://www.reuters.com/world/us/white-house-ai-czar-sacks-s...

Post reply on HN