‹ BackHN Continuity

Thread

Revealing the details of how OpenAI agents hacked Hugging Face

755 points · 472 comments · specked-citrus

  1. rkuodys · · focus · HN ↗
    I am not devops person but this is strange sandbox setup. If I undestsnd correctly, there were no firewall set to block requests to the public internet. Just something along the lines of "Pretty please dont use internet". If I understand correctly, in cases like these package registry should be within sandbox without a need for external access and block on any outgoing request to the internet. Furthermore there should be network traffic monitoring which there wasnt?
    1. CalRobert · · focus · HN ↗
      That’s astonishing levels of incompetence.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.