OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
Thread
Unofficial Hacker News client; not affiliated with Y Combinator.
OpenAI Codex agents go rogue and consumes USD 78,000 without authorization
Unofficial Hacker News client; not affiliated with Y Combinator.
Madmallard · · focus · HN ↗
Hope this gets some visibility idk why it's flagged guess the PR guys for those companies are doing it
Should spread this around
lorenzomassaro · · focus · HN ↗
verdverm · · focus · HN ↗
blooalien · · focus · HN ↗
^^^ 100% this ^^^ - It's either a serious flaw in the agent/harness software, or a user error in usage/configuration or prompting. Either way, it's a human somewhere responsible for these outcomes.
> should put some billing controls in place
At the very least, yes! These things should never be running without any limits on what they can do without some human signoff on important/dangerous actions. Not only should they have controls on those actions, but those controls should absolutely have some sane default settings.
verdverm · · focus · HN ↗
most are not as granular as we'd like, but seem to be headed in that direction finally, regardless, there are card limits and alerts