Post

re: OpenAI accidentally hacking Hugging Face The models exploited a hole in their proxy to access a software package registry, but like, they literally bought Astral and have been making moves in other package registry spaces IIRC. Could they not have just forked the full registry internally?

31/7/26, 11:50 pm0 reposts1 like

Joey Carpinelli

@jdc.pub

1 Aug

Or, rather, they exploited a hole in the package registry, if I understand correctly. Same difference. They shouldn’t need network at all for getting packages. Air gaps exist. I must be missing something?