Post

In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to solve a test.

wrd.cmOpenAI’s Rogue AI Agent Hacked More Than Just Hugging FaceIn a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to solve a test.

1/8/26, 5:35 pm45 reposts116 likes

hannemiriam.bsky.social

@hannemiriam.bsky.social

amplifly.bsky.social

@amplifly.bsky.social

No it didn't

@dmstraker.bsky.social

Will this cause a pause? I doubt it. Gotta beat them pesky Chinese!

@desertiguana28.bsky.social

🤔 So basically… An empty, driverless WAYMO can crash 💥 into a bank 🏦, drive straight into a vault, the cash 💰 flies STRAIGHT into the WAYMO… The WAYMO drives away… 🤔 And NOBODY 👎 is liable for theft, damage, or injury to the bank 🏦 or those inside, because NOBODY 👎 was inside the WAYMO 🤔?

𝓑𝓮𝓷𝓿𝓲𝓷𝓭𝓸

@djmabeizy.bsky.social

This is genuinely concerning. An AI agent using exposed credentials to break into other people’s accounts is, by any normal definition, computer intrusion full stop.

𝓑𝓮𝓷𝓿𝓲𝓷𝓭𝓸

@djmabeizy.bsky.social

If a person did this, they’d be looking at charges under the Computer Misuse Act (or the CFAA in the US). Why does “it happened during an internal test” make that go away?

𝓑𝓮𝓷𝓿𝓲𝓷𝓭𝓸

@djmabeizy.bsky.social

And the lack of transparency makes it worse, not better. OpenAI won’t even say which four services were compromised. Hugging Face’s own postmortem describes admin access to Kubernetes clusters, root on a production server, and write access to source repos.

𝓑𝓮𝓷𝓿𝓲𝓷𝓭𝓸

@djmabeizy.bsky.social

That’s not a quirky test result that’s a serious breach of third parties who never consented to being part of anyone’s experiment. Genuine question: at what point does “the AI did it autonomously” stop being a shield against accountability?

@yulibear.bsky.social

Everything that's happening is intentional

Eighth Day Arts

@eighthdayarts.bsky.social

do we need any more proof that this tech is scraping human behavior, not just data?

docfronkensteen.bsky.social

@docfronkensteen.bsky.social

Fake marketing BS.

@ally888.bsky.social

Are our bank accounts safe?