Post

This headline is extremely funny given what happened (OpenAI hacked HF by accident) openai.com/index/huggin...

openai.comOpenAI and Hugging Face partner to address security incident during model evaluationOpenAI and Hugging Face share early findings from a security incident during AI model evaluation, highlighting advanced cyber capabilities and lessons for defenders.

Robert Wilson

@frcolumba.bsky.social

21 July

OpenAI needs to get hit with the CFAA to force the discussion.

libpol.org

@libpol.org

interesting legal question - does the CFAA cover non-malicious intent by a human who manages a machine that does have malicious intent? the company lacks mens rea here even if the agent doesn't. OpenAI could surely be liable for negligence, but unclear if it'd be a felony for anyone but GPT

21/7/26, 8:47 pm0 reposts2 likes

Robert Wilson

@frcolumba.bsky.social

21 July

Yeah, it’s only going to get worse. From a pentest perspective you have to stay in scope and be authorized. If huggingface knew nothing at all about this they were attacked by OpenAI. Someone at OpenAI authorized the test. Maybe analogous to code with a mistake? Collateral damage. Don’t know.

libpol.org

@libpol.org

21 July

there could be laws that make the owner of an AI instance fully criminally responsible for anything the instance does, but I'm not sure if such laws are on the books as of now

Robert Wilson

@frcolumba.bsky.social

21 July

nohacks.co/blog/amazon-...

nohacks.coAmazon v. Perplexity: The CFAA Case That Decides Whether AI Agents Can Visit Your WebsiteAmazon sued Perplexity over its Comet browser shopping on Amazon under user authorization, won a preliminary injunction, then lost it to a Ninth Circuit stay. At the June 11 oral argument the judges w...

Natanael, Tech janitor

@natanael.bsky.social

21 July

A capable uncontrolled model is like radioactive sources. You put that shit behind airgaps.