posted in Technology
How OpenAI’s human mistake led to the AI-powered hack on Hugging Face
techcrunch.com/2026/07/22/how-an-openais-human-mistake-led-to-the-ai-powered-hack-on-hugging-face/
TechCrunchHow OpenAI’s human mistake led to the AI-powered hack on Hugging Face | TechCrunchOpenAI made a mistake setting up what it called a “highly isolated” testing environment and sandbox. According to cybersecurity experts, that human mistake is what made the AI-powered attack on Hugging Face possible.Replying to @eicker@lemmy.world
It was just as you’d expect: This isn’t an AI problem! It’s the same human problem we’ve always had: misconfigurations, weak security, and avoidable mistakes. AI just punishes those errors faster and more effectively than traditional software ever could. Anyone who continues to rest will be severely punished.
Replying to @eicker@lemmy.world
Then why the fuck doesn’t OpenAI use OpenAI to make a sandbox OpenAI can’t break out of?
If OpenAI can’t make a sandbox that OpenAI can’t break out of, then it can’t make security it can’t break thru either.
Meaning the product as sold is useless. And if anyone actually uses it, it will just be spinning in circles creating zero benefit and exacerbating almost every global issue we’re currently facing.
Some of that has to sink in:
Even if you’re right about chatbots being the future, that’s not a good future and we should avoid it.
Replying to @givesomefucks@lemmy.world
That’s assuming security is something you solve once. It isn’t. Every security system is built by humans, tested by humans, and eventually bypassed by humans. We don’t abandon operating systems because vulnerabilities exist: we patch them, improve them, and layer defenses. AI changes the pace, not the fundamental nature of cybersecurity.