logoalt Hacker News

pizza234yesterday at 8:33 PM2 repliesview on HN

I take you haven't read the report. The agents found and exploited two zero-days.

I don't doubt that AI companies should be accountable for crimes committed by their agents, but to describe the security containment as a joke dangerously understates the autonomy and danger of AIs.


Replies

bavellyesterday at 8:45 PM

How long did it take these companies to even notice? Why wasn't exploiting bugs in the agent sandboxes anticipated?

Human failures all around, though it's easier to just blame the models.

show 2 replies
cannonpalmsyesterday at 9:20 PM

Defense in depth is a thing. There should be audit requirements to show that you have done your due diligence in ensuring that the training environment is locked down.