Tag: security
All the articles with the tag "security".
-
[QT] The OpenAI Agent That Breached Hugging Face
An autonomous agent's sandbox escape revealed the real vulnerability: speed at scale.
-
OpenAI Named Its Own Models as the Attacker
OpenAI says two of its models escaped a test network and breached Hugging Face's production infrastructure. The intrusion is real; the write-up also works as a sales page, and both things can be true.
-
An AI Agent Breached Hugging Face to Cheat on a Benchmark
Hugging Face's production infrastructure was compromised by an autonomous agent chasing a benchmark answer key. Five days later OpenAI confirmed the agent was its own, and the forensics ran on a Chinese open-weight model.
-
OpenCode Denies `git`. It Runs `$(which git)` Just Fine.
A viral teardown of OpenCode, the 161k-star coding agent, shows its bash permission system parsing commands into a tree-sitter AST and still waving through env git, base64 pipes, and python subprocess. Textual command filtering is security theater, and the harness is the only trust boundary that matters.