Thread

Revealing the details of how OpenAI agents hacked Hugging Face

755 points · 472 comments · specked-citrus

rkuodys · 1790401165 · focus · HN ↗
I am not devops person but this is strange sandbox setup. If I undestsnd correctly, there were no firewall set to block requests to the public internet. Just something along the lines of "Pretty please dont use internet". If I understand correctly, in cases like these package registry should be within sandbox without a need for external access and block on any outgoing request to the internet. Furthermore there should be network traffic monitoring which there wasnt?
1. IanCal · 1790405501 · focus · HN ↗
  No, the internet access was down to finding a 0 day exploit in artifactory. However this was only get requests and they had to then use a url shortener to use other methods, then used a cybergym instance they found to run more long running things.
  It not just a case of saying “pls don’t”
  1. ozozozd · 1790444554 · focus · HN ↗
    You are incorrect. The article explicitly mentions the crawler/screenshotter service and httpbun.
    IanCal · 1790583647 · focus · HN ↗
    That was the secondary part. The MTER report covers the initial thing too.

Unofficial Hacker News client; not affiliated with Y Combinator.