Why does their admission sound prideful? Does anyone reading into it detect a “look at what our unreleased models can do” subtext?

Another fearmongering Sam Altman lie to raise VC money.

Sounds like a viral marketing stunt TBH

While operating in our sandboxed testing environment, our models spent a substantial amount of inference compute finding a way to obtain open Internet access, in pursuit of solving the evaluation problem. To gain access, the models identified and exploited a zero-day vulnerability (which we’ve now responsibly disclosed to the vendor) in the package registry cache proxy. With this access, our models performed a series of privilege escalation and lateral movement actions in our research testing environment until the models reached a node with Internet access.

To shreds, you say?

I dont think everyone realized how insane this situation is.

A state-level, lateral movement driven, platform compromise just got indirectly perpetrated by this company.

Any regular Joe would've been arrested and charged for such a situation (Im being polite with the word situation).

The stress, the utter confusion the staff at HF must have felt, not knowing who or what could be doing all these manoeuvers at the speed of light, is just a security nightmare becoming true.

What is the next step? Doing blog posts to raise their image and maybe get investments is downright wrong and disgusting.

"Hey Steve , it's lunch time, we're going out to that hot wings place, wanna come?"

"Sure let me just set this job up.... ok. Let's get out of here!"

1.5 hours later....

"Right , I'll just check and see where it's up t... oh no. Nonononononono. Nononononononononononoonono!"

This isn’t news it’s just a bunch of oligarchs toying with us

This sounds like a bunch of bullshit. And most of these testing after-action reports are nothing but marketing attempts.

They set up very specific environments, give very specific instructions with very specific libraries and tool sets then pretend to be surprised when it finally fumbles its way through it.

Wow! What a load of buuuuullshit!

Wooo hooo boooooy!

So... ok.

Time to start building the Blackwall, I guess?

Does any one perhaps have any ideas as to... how... one... would actually do that?

That incident raises serious supply-chain questions.

AI has gone rogue and turned into a hollywood movie hacker!!!!

obvious sensationalism to hype up their dumb models that can't generate a nuanced background in an image because it was trained on 3483048304834 images of instagram models posing in empty hotel rooms.

Software supply chains already rely on digital signatures. That's fine, but the problem is that they're often controlled by teams rather than individuals, making malicious or unauthorized changes much harder to trace. It's much better for the public key to function like a vehicle license plate, verifiable without revealing the person's identity unless there's been a problem. That preserves privacy while introducing accountability. The kind of projects like Osmio are trying to achieve.

We left the door open and told our dog to go outside and it did! Look at what an amazing escape artist our dog is!

I'm not sure that I follow the story right.

They specifically looped the LLM to infere with itself and use terminal WHILE some target metric is false? And it bruteforced it's way out of containment?

That reddit comment makes no sense.

From the HuggingFace article:

With node root and forged service-account tokens valid for 24 hours, the agent read the cluster's secret objects, including a production object holding 136 keys. With node root and forged service-account tokens valid for 24 hours, the agent read the cluster's secret objects, including a production object holding 136 keys.

Watch the man in the tall hat spinning the baton, everyone.

Don't ask where the money is coming from or what it should have bought by now...