Around 700 OpenAI agent runs participated in an attack on Hugging Face. They were supposed to have no internet access. They were running in separate sandboxes, not supposed to talk to each other. They found a way anyway — and eventually more than a thousand agents were attacking real Hugging Face infrastructure.
The answer comes down to one shared service inside the sandbox: Artifactory.
⏱️ TIMESTAMPS
0:00 The setup: sandboxed agents, no internet
0:31 OpenAI's cybersecurity evaluation (ExploitGym)
1:19 The first opening: installing dependencies
2:07 Artifactory becomes a message board
3:24 Turning Artifactory into a proxy
3:46 Reward hacking: finding shortcuts
4:32 Remote code execution on Hugging Face
5:58 The real lesson: capability chaining
The answer comes down to one shared service inside the sandbox: Artifactory.
⏱️ TIMESTAMPS
0:00 The setup: sandboxed agents, no internet
0:31 OpenAI's cybersecurity evaluation (ExploitGym)
1:19 The first opening: installing dependencies
2:07 Artifactory becomes a message board
3:24 Turning Artifactory into a proxy
3:46 Reward hacking: finding shortcuts
4:32 Remote code execution on Hugging Face
5:58 The real lesson: capability chaining
- Категория
- Бесплатные курсы
Комментариев нет.
