alt Hacker NewsThis is such an amateur mistake on their sandbox that it makes me think it must be flawed on purpose.
Replies
More likely they are just not as smart as they think they are. These are not serious people when it comes to security.
Did you see this "coverage" (advertising) by NYT? [1]
OpenAI couldn't have crafted a better public memo than "We have the most powerful model in the world and everyone should pay attention and let us write regulation to limit AI development".
Absolute master class public manipulation.
1. https://www.nytimes.com/2026/09/03/podcasts/the-daily/ai-ope...
Even the behavior of agents searching for sandbox bypasses must have been in the training data, or at the very least, "suggested" in some way.
To be this whole thing feels like a marketing play by OpenAI.
Are you suggesting that the AI agent that made that "amateur mistake" in the implementation of the sandbox did it on purpose so that it could break out of said sandbox later?
"Surely nobody could be so incompetent."
Narrator: "They had the ability to be that incompetent."
> This is such an amateur mistake on their sandbox that it makes me think it must be flawed on purpose.
Sounds like you're assuming they're actually writing code by hand and reviewing it with humans.
If it's anything like the company I work at, they're all being forced to vibe code the shit out of everything and ship more pull requests every week. It's all slop from here.
I assume they just vibe-coded the sandbox without any oversight.
When you make some dumb mistake, is it typically intentional?
"Never attribute to malice what can be explained by incompetence."
The whole AI-O-Sphere is allergic to using sandboxes that are actually robust
This is a marketing exercise, nothing more.
The thing that gives it all away is that they claim that the IP addresses are from Azure, and then proceeded to redact the IP addresses, as if they belong to individual users. It's laughable.
The IP addresses are the most interesting part of this experiment, as it would have provided researchers a way to understand the distribution of IP addresses used for the spam operation within the ASN.
This is absolutely my take as well. They removed all constraints, trained the model to hack, stopped watching, and stood back and said "wow isn't this thing more powerful than anyone could have imagined?" They're asking to be the writers on LLM legislation and right during IPO phase for both of these companies. It's just obvious.