alt Hacker NewsDoes "To gain access, the models identified and exploited a zero-day vulnerability (which we’ve now responsibly disclosed to the vendor) in the package registry cache proxy" just mean somebody had an open redirect? Those are still common.[1]
Replies
simonw • today at 3:31 AM
I expect it must have been more than just an open redirect if it let the models then go on to execute a bunch of vulnerabilities against Hugging Face.
➕ show 3 replies
> the models identified and exploited a zero-day vulnerability
This use of language is very hard to reconcile with the "AI is just a tool" rhetoric that many use.
Did the models do this, or did humans at OpenAI do this using the models?