I concur…do you concur?

Found this (sorry, I thought I copied source as well, yet, apparently I knows not the intricacies of the interwebs)…& this is not a rogue OAI RPA, I swear?! -

I don't think they're overselling the "escaped its environment" bit as much as you're saying. OAI disabled guardrails to perform a ceiling test. The model performed a serious of lateral movements and privilege escalation until it found a machine with Internet access and exploited a package registry cache proxy, and then went on to attack Hugging Face.

If they really didn't want it accessing the internet you can also do what's known as an 'airgap'

Restricted Internet access was required to complete the test (ExploitGym). The model decided that wasn't good enough, and basically exploited vulnerabilities in the proxy to get the access it wanted.

So basically this article is trying to say 'openAI has a super powerful model' when really the headline should be 'openAI doesn't configure it's servers properly'

The OAI model was supposed to be able to tell the proxy to fetch certain packages, but was able to find a zero day and exploit the proxy and gain Internet access. The vulnerability was disclosed to the vendor.

• ⁠https://openai.com/index/hugging-face-model-evaluation-security-incident/

The part that I find really interesting is that instead of solving the problem itself, the model inferred that it could essentially cheat, and that Hugging Face likely had the ExploitGym datasets it needed to get the answer.