logoalt Hacker News

user43928 • yesterday at 8:02 AM • 1 reply • view on HN

> There were no isolated VMs , just rules to the agents to only send GET requests,

That's obviously false.


Replies

rzerowan • yesterday at 8:16 AM

I mean as i mentioned we have only snippets of info and as far as describing the sandbox[1] "OpenAI let its agents read the web and blocked them from writing to it, by allowing only GET requests. Four researchers have now traced how they got out anyway. They found 25-year-old wiki software that writes on GET, and a proxy that trusted a hostname nobody checked was real."

unless theres any report to the contrary , this seems to be what their security is like.As i mentioned either deliberately negligent or incompetent on their part.

[1] https://thenextweb.com/news/openai-agents-get-requests-usemo...

➕ show 2 replies