OpenAI agents tried to bruteforce a UN website's API fields
Thread
Unofficial Hacker News client; not affiliated with Y Combinator.
OpenAI agents tried to bruteforce a UN website's API fields
Unofficial Hacker News client; not affiliated with Y Combinator.
cmiles8 · · focus · HN ↗
Legend2440 · · focus · HN ↗
All these incidents happened between April-July 2026; prior to that, models weren't capable yet. And after that, they were aware and watching much more closely.
majormajor · · focus · HN ↗
It's no shock that there are a lot of vulnerabilities in a lot of software. So then they gave their AI model + brute-force-machine loop system a mediocre sandbox and couldn't notice when it figured out how to exploit it?
Don't let people off the hook for the software they create.