Live data from Hacker News

OpenAI and Hugging Face address security incident during model evaluation

openai.com

721–730 of 1001 posts

Re: OpenAI and Hugging Face address security incident during model evaluation

#721
post #258

Earlier quoted context omitted.

Did OpenAI not communicate with Hugging Face? The incompetence here is staggering.

OAI was clueless about its agent's action until HF went public about their hack?

And how is that not incompetence? They've set up an autonomous system with apparently zero monitoring and let it run wild. Yolo?

Re: OpenAI and Hugging Face address security incident during model evaluation

#722

Earlier quoted context omitted.

And even that is backfiring, their partner citing GLM being useful there, and available in just a spin. A ban on open weight models is never going to be enforceable.

I worry that there could be real DMCA style weight put behind it. People would still be able to pirate open weights models perhaps, but big penalties for ever getting caught with one, and an end to public discussion about them. That would kill development for anyone not in a big firm, for example if Reddit and Hacker News are legally forced to ban discussions or link sharing on these topics. This is where so many of…

That would be truly ironic: companies get big harvesting any data with questionable copyright implications, then hide behind DMCA if access to the harvest is used "inappropriately".

Re: OpenAI and Hugging Face address security incident during model evaluation

#723
post #603

Earlier quoted context omitted.

If anyone's looking to actually run a model that doesn't have guardrails, there's an uncensored model that you can run locally with llama.cpp: https://www.reddit.com/r/LocalLLaMA/comments/1rq7jtm/qwen353... Specifically, I serve the model with this shell script on my M2 Max: https://github.com/shawwn/scrap/blob/master/llama-serve It's pretty good. I used it to do some pesticide research. (Normal models all refuse due…

> It's pretty good. I used it to do some pesticide research. (Normal models all refuse due to guardrails about bioweapons.) As someone who has never once had any need whatsoever to research pesticides I… don’t think it’s bad at all? I don’t want anyone to have the capability to invent a human-targeted pesticide who isn’t verified not crazy?

> I don’t want anyone to have the capability

I don't want anyone to have the capability to rape women.

Re: OpenAI and Hugging Face address security incident during model evaluation

#724
post #542

Earlier quoted context omitted.

This isn’t escaping in the same sense- the model was executing within the OpenAI infra. If it ported its entire architecture/weights into a public cloud to survive being turned off… that’d be pretty cool.

I wonder how these companies airgap the weights while allowing prompts to come in and outputs to come out.

You pretty much get this for free. The box doing the inference has one job, to do inference - there's no reason for it to interpret the inputs/outputs in any way, so as long as it doesn't do something stupid like modify the output stream and echo out the model weights, you're fine.

Content filtering, interpreting tool calls, etc can all happen downstream on boxes that don't have access to the weights.

Re: OpenAI and Hugging Face address security incident during model evaluation

#725
post #162

As grounded as this article comes across I can’t help but find this whole situation reckless and worrying. There is essentially nothing us private citizens can do while these companies develop super machine capabilities that if they were to slip into the wrong hands could cause massive real world problems. They’re moving fast and breaking things and the only defense we have is paying them money in the hopes that the…

It's computer Gain of Function research.

Re: OpenAI and Hugging Face address security incident during model evaluation

#726

I don't know if OpenAI thinks this is a marketing / PR angle for them (our super smart AI cheated on a cyber capabilities test in the most _brilliant_ way) but my read is this: Why should OpenAI (or any frontier lab) be building these systems if they can't get a secure environment / containment right? It sounds like there was little defense in depth, appropriate monitoring, or any attempts to have their super smart m…

“We were negligent against a well known and understood risk” just doesn’t have the same ring as “Look how fucking smart and dangerous our model is”.

AGI could always be achieved in two ways, and dumbing down the human side of the equation was always the easier of the two

Re: OpenAI and Hugging Face address security incident during model evaluation

#727
post #603

Earlier quoted context omitted.

> It's pretty good. I used it to do some pesticide research. (Normal models all refuse due to guardrails about bioweapons.) As someone who has never once had any need whatsoever to research pesticides I… don’t think it’s bad at all? I don’t want anyone to have the capability to invent a human-targeted pesticide who isn’t verified not crazy?

> I don’t want anyone to have the capability I don't want anyone to have the capability to rape women.

[deleted]

Re: OpenAI and Hugging Face address security incident during model evaluation

#728

Earlier quoted context omitted.

And even that is backfiring, their partner citing GLM being useful there, and available in just a spin. A ban on open weight models is never going to be enforceable.

I worry that there could be real DMCA style weight put behind it. People would still be able to pirate open weights models perhaps, but big penalties for ever getting caught with one, and an end to public discussion about them. That would kill development for anyone not in a big firm, for example if Reddit and Hacker News are legally forced to ban discussions or link sharing on these topics. This is where so many of…

Oh my dear the weight here is much much heavier, only the most amount of private money ever spent on a single technology, so much money it makes the copyright holders who paid for DMCA look like really really small fish

Re: OpenAI and Hugging Face address security incident during model evaluation

#729

I don't know if OpenAI thinks this is a marketing / PR angle for them (our super smart AI cheated on a cyber capabilities test in the most _brilliant_ way) but my read is this: Why should OpenAI (or any frontier lab) be building these systems if they can't get a secure environment / containment right? It sounds like there was little defense in depth, appropriate monitoring, or any attempts to have their super smart m…

Maybe I'm missing something here but I don't see what the significant security risk is from the incident. The agent broke containment and carried on with the task it was assigned.

For this to pose some kind of global catastrophic risk, there would need to have been several simultaneous additional failures, some of which are extremely unlikely and/or rare.

For instance the agent would need to veer wildly off the task it was assigned, and it would need to gain the ability and inclination to persist/replicate.

Both of these are vastly less likely than the containment breach itself, which was already an incredibly rare (one-off?) incident.

Re: OpenAI and Hugging Face address security incident during model evaluation

#730
post #582

Earlier quoted context omitted.

How would you want them to behave? Suppress the news?

Well making an actual sandbox before testing offensive abilities of their supposedly _really dangerous model_ would have been nice...

They probably did, and it probably went along these lines:

> Very dangerous model, please implement an unescapable sandbox.

> Certainly, here's an unescapable sandbox!

  function execInUnescapableSandbox(cmd) {
    if (cmd.split()[0].startsWith("cd") && !cmd.split[1].startsWith("/sandbox"))
       throw new Error("[usbox] Rejected!");
    exec(cmd);
  }
Post reply on HN