Home | Notifications | New Note | Local | Federated | Search | Logout

Note Detail

Christine Lemmer-Webber@cwebber@social.coop (2026-07-22 05:41:50)
OpenAI accidentally hacks Hugging Face. But it's more wild than that https://openai.com/index/hugging-face-model-evaluation-security-incident/

OpenAI was running an exploit test system in a sandbox. Their model determined that probably Hugging Face had model information that would be useful to complete the task, so it broke out of its sandbox, developed an exploit, broke into Hugging Face to go rooting around for information

---Replies---

Christine Lemmer-Webber@cwebber@social.coop (2026-07-22 05:42:17)
Meanwhile Linux publishes 432 Linux kernel CVEs https://lore.kernel.org/linux-cve-announce/

There is only one path out of this. We need a *fully auditable, formally verified, and human-understandable* capability-secure trusted computing base as the foundation of our operating systems.

Otherwise... we're just toast.