Thread

1. vintagedave · 1790241637 · focus · HN ↗

   > the breach took place on 18 June - Open AI informed the government with an email to a general address on 10 September

   So we have a company hacking a foreign government's websites and data. And, in terms of ethics, they take almost three months to notify; and in terms of competence, appear to have no formal contacts nor to have found one in that time.

   Once an American business starts hacking allied governments, it's time for strict responses, yes? Replace the governance (board and C-level)? Remove financial incentives and open the company - open weights, open training, per its original 'open' ethos?

   Altman is busy saying there needs to be regulation, but in terms of what OpenAI does, he can control that already.

   1. rot09 · 1790260740 · focus · HN ↗

      In the infosec community it is well known that OpenAI and Anthropic did not hire many security engineers or researchers pre-April 2026. There is likely a case for gross negligence (IANAL).

      There has been a crazy hiring push from both companies to poach security engineers/researchers from Google, Apple, and Meta since Q2/Q3, but the response was incredibly delayed. Many talented security engineers/researchers I know at Apple/Google/Meta (including myself) receiving these offers are worried about taking them due to the risks of criminal/personal liability and the more likely risk of tarnishing their careers.

      1. kakacik · 1790267059 · focus · HN ↗

         Nice to see some folks still have spine and all that it brings

Unofficial Hacker News client; not affiliated with Y Combinator.