alt Hacker NewsThe fact that they're using Artifactory in the first place is already a failure. The fact that they didn't airgap the network or even use any type of egress blocking is just absurd.
Zero days are nothing new, secure containment has been a solved problem for a long time.
Replies
LordDragonfang • today at 6:16 AM
As someone who has actually had to maintain multiple airgapped networks in the past and knows the amount of work that's required for that, especially at the scales of data they're working with...
All the armchair cybersec experts claiming they "obviously" should have airgapped are the ones being absurd. Especially in the same breath as claiming the models apparently aren't intelligent enough to warrant such concern.
➕ show 8 replies
I'm curious how you would airgap a datacenter-scale training run. No reading training data from a cloud store, someone from OpenAI flies out to Abilene or whereever with a suitcase full of SSDs? When researchers in SF write code for a new RL environment, they ping somebody who sticks it on a flash drive and walks over to the server rack with the GPUs? Has anyone ever trained an LLM like this?
Maybe you don't mean a literal airgap, you just mean configuring Internet access off. But... they did that. That's why the agents had to hack Artifactory to get it...