Is there a world where Sam or Dario can seize the bitcoin network somehow?
They probably have enough compute for a 51% attack.
Doubtful. ASICs are really good at the only thing they can do.
OpenAI agents carried out an undisclosed attack on RubyGems
61–70 of 612 posts
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#62I wonder how much of this is intentional "incompetence" so they can justify the most recent campaign to build a regulatory moat against competition. The repeated refusals to disclose until caught certainly seem malicious, yet at the same time the boasting about their capabilities is also at an all time high.
Intentionally doing this kind of hack would be a serious felony. I don't think it's plausible that the leaders of a major business would: - commit serious felonies - in order to deliberately trigger an investigation against themselves - which - since, in this scenario, they know their company would be investigated - might send them to jail - while at the same time spending tens of millions of dollars on the Leading t…
They just need plausible deniability, which is trivial to manufacture at this stage of the game.
"Oops our black box went off the rails. We'll add better logging and alerts next time around."
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#63Earlier quoted context omitted.
"ChatGPT, use the stylometry that you've developed via hoovering up the history of every internet post ever written to divine the true identity of Satoshi and dispatch men with $5 wrenches to his home address."
i hate that $5 wrench meme. Randall Monroe of xkcd is ordinarily such a smart guy but he really didn't do his research with his $5 wrench attack idea. Torturers don't hit people in the head with something hard. Not the ones who are any good at their job anyway. Easy way to concuss someone or have them die of shock before they tell you what you need to know.
Jokes are hard.
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#64The files the agents were trying to retrieve were all part of "Modern.Gov", a "proprietary agenda, committee-meeting, and governance-management product" made by Civica.
*Is it possible they were trying to use RubyGems to pivot to attacking government sites? * One of the diffs shows they were broadly scraping pages hosted by this .NET component.
I was unable to find any modern CVE for Civica.
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#65Earlier quoted context omitted.
I do wonder if something like the agents leaving obvious footprints like "oai" is intentional, or the relatively mundane nature of what the agents are ultimately trying to accomplish. Like someone has intentionally set these groups to attack something that has no real world danger of hurting anything critical (like trying to retrieve problem answers from huggingface) as a "harmless demo" of what they could do if turn…
You really wanna start asking questions, how do we know it isn't North Korea or Anthropic via a VPN claiming to be oai?
I mean the HF attack seemed to be traced back directly to OpenAI. Any of the others I'm not sure.
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#66I wonder how much of this is intentional "incompetence" so they can justify the most recent campaign to build a regulatory moat against competition. The repeated refusals to disclose until caught certainly seem malicious, yet at the same time the boasting about their capabilities is also at an all time high.
Intentionally doing this kind of hack would be a serious felony. I don't think it's plausible that the leaders of a major business would: - commit serious felonies - in order to deliberately trigger an investigation against themselves - which - since, in this scenario, they know their company would be investigated - might send them to jail - while at the same time spending tens of millions of dollars on the Leading t…
I sort of implied the other thing in my comment. But.
There is no version of america that exists today where a billionaire gets sent to prison.
This is the moment in history where this shit is possible and accepted. If they don't do it now, they never can.
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#67Re: OpenAI agents carried out an undisclosed attack on RubyGems
#68I wonder how much of this is intentional "incompetence" so they can justify the most recent campaign to build a regulatory moat against competition. The repeated refusals to disclose until caught certainly seem malicious, yet at the same time the boasting about their capabilities is also at an all time high.
Intentionally doing this kind of hack would be a serious felony. I don't think it's plausible that the leaders of a major business would: - commit serious felonies - in order to deliberately trigger an investigation against themselves - which - since, in this scenario, they know their company would be investigated - might send them to jail - while at the same time spending tens of millions of dollars on the Leading t…
Didn't they find emails and other things from these leaders where they're okay downloading / obtaining content from illegal sources?
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#69If you or I did this we would be put in jail.
We have to disabuse govt of the notion that these agents are not under complete control of their owners.
Open AI employees should go to jail.
Re: OpenAI agents carried out an undisclosed attack on RubyGems
#70Earlier quoted context omitted.
Intentionally doing this kind of hack would be a serious felony. I don't think it's plausible that the leaders of a major business would: - commit serious felonies - in order to deliberately trigger an investigation against themselves - which - since, in this scenario, they know their company would be investigated - might send them to jail - while at the same time spending tens of millions of dollars on the Leading t…
They just need plausible deniability, which is trivial to manufacture at this stage of the game. "Oops our black box went off the rails. We'll add better logging and alerts next time around."
[deleted]