What plug, exactly? And if it takes humans a month to find out something has been happening at all, and only because these relatively stupid agents make amateur mistakes such as overloading the Artifactory instance, how in the hell do you have any trust at all that we’d succeed in stopping a bunch of determined agents that find a way to rent or steal some compute and be on their way?
> if it takes humans a month to find out something has been happening at all,
That time is more reflective of the security posture of OpenAI than "humans" in general. Alibaba had a similar incident. Their internal networking team picked it up fairly quickly:
I get the impression OpenAI eat their own dog food when building their infrastructure, so they aren't completely across the unimportant messy details. It's entirely possible the configuration was generated and reviewed by AI's, so no human has ever set eyes on it. I suspect that hasn't been a huge issue (apart from the bit where OpenAI said the kubernetes configuration was overpermissioned) so far. It may become a big issue when the AI's creating those configurations see those message boards.
Anothropic is clearly no better, as they attacked three organisations, only noticing weeks later after the Hugging Face incident caused them to look at their logs.
We do have protocols for containing dangerous things - like the BSL-4 standard for bio labs. The irony is OpenAI and Anothropic have been hyping how powerful and dangerous their products for ages now in order to pump their IPO valuations. Apparently they weren't treating their own hype as serious. If they did, they would have detected these outbreaks when they happened, not a month or two later.
Right now, they are looking like opsec cowboys, probably vibe coding opsec cowboys.
In other news, I have a bridge to sell.