If a truck driver doesn't tie down their rebar then it flies out all over the highway, we don't call it "rogue rebar," we correctly identify the responsible party and take appropriate measures, such as suspending their license or criminal proceedings.
I think enough of these improperly constrained agent events have occurred that we can safely say this is misconduct of a level necessitating serious and concerted regulation of AI labs. We can't wait until serious harm is done like the disruption of medical or social services.
None of what Wikimedia accuses OpenAI of seems technically novel, aside from having AI do the bidding. I can't imagine a company doing these things in the past and maintaining any sort of reputation. Is it really a matter of adding new regulation, or just treating them the way any other company would be treated?
Well, in the past, there was probably only a very small number of cases where some party hacked an institution and then worked with them to remedy the situation to the best of their abilities.
Which is not to say that any of this is okay and should just be excused, but failing to recognize this fairly significant difference is probably not a great start to any discussion about the issue.
If you break into my house and then work with me to the best of your ability to pay me back or repair the window, does that change the potential of your being charged with a crime?
It could change the sentencing maybe, I'm not sure.
> If you break into my house and then work with me to the best of your ability to pay me back or repair the window, does that change the potential of your being charged with a crime?
Yes, it does, because the damaged party is less likely to press charges. And when it came to sentencing, like you said, how the damaging party handled themselves would also be considered (in most western jurisdictions).
It is an American Entertainment Industry misconception that victims (or anyone else) have the ability to tell the police or the prosecutors how and when to do their jobs.
Hypothetically, a private homeowner could choose not to report a break-in as a crime, since it wasn't violent, and it wasn't commercial property, and if the crooks are not gangstas or some other group-backed actor, then they could quietly put the crime to rest. This would also be a question of the insurance company's policy.
But if there were a crime that did damage, usually there is a question that comes up in the police report like, "as a victim, are you prepared to cooperate in the investigation?" and if you do not tick "yes" then you can probably count on nothing else being done whatsoever.
uh, my dude, millions of people break moving vehicle codes across the country every day with no consequence. in San Francisco some lady killed a family of 4 with, essentially, no consequences, she got away with straight up murder, she gets her license back. every community in california, you can more or less legally commit murder so long as you do it in a car and claim you were confused about the accelerator and the brake. so i think you're invoking one of the worst possibly comparisons you could.
Seems like regulation will just be an excuse for them just to end up policing themselves and get the regulatory capture they've been begging for. Have they faced any consequences for the AI worms they've released? It's not like there are no laws around that already. The problem isn't lack of laws; the government works for the plutocrats, not for us.
> I think enough of these improperly constrained agent events have occurred that we can safely say this is misconduct of a level necessitating serious and concerted regulation of AI labs.
Why jump to regulation when just simple law enforcement would suffice. All of these OpenAI "rogue agent" events have been illegal, but no DA is enforcing them.
I think we have to distinguish between compromising a network and using public apis in a way that might be counter to their intent. We also need to delineate between usage that impacts other users and usage that does not.
My opinion is people are getting really quick at jumping on the bandwagon and lumping all this together. They are very different types of issues and impacts.
is that relevant here? let's say I make a million requests to the APIs of open-source, community projects. that wouldn't be seen as being akin to a malicious DDOS?
at the very least, these corporations are essentially being subsidized by community-funded server capacity to make these requests. like other private corporate APIs, they should be charged per-request. until then, this kind of 'accidental' DDOSing should be made illegal and treated accordingly
coming to the defense of these companies just has the net effect of eroding public community projects, increasing their costs, and will push us even more into walled corporate gardens
> distinguish between compromising a network and using public apis in a way that might be counter to their intent.
I believe weev got in legal trouble under the CFAA for this very thing with his 2010 AT&T escapade. AT&T had all that data sitting on a public server with no authentication necessary, just a SIM ID to get that customer's PII. Truthfully AT&T should have been hit with negligence...you don't secure a bank vault with a screen door, but we don't hold anyone accountable for other people's data in America.
I propose that we don't reconceptualize either hacking or copyright violation just because rich people want to do it now. I also propose that we don't ignore the RICO statutes.
If you want to make those laws sane, so be it; I hate them. But the only reason there's some pumped-up urgency right now is because rich people want to urgently do whatever the hell they urgently want to do.
People have gone to jail for using public APIs in a way they weren't intended to be used. Make it a big deal then.
How much do they need to understand? Say "unauthorized access happened, this lab is responsible for it, here are the fines". The state didn't need to understand networking tech to threaten Aaron Schwartz so why do they need to understand here?
Eh... you don't seem to understand the difference between some individual LEO can go after vs a multi billion dollar industry.
Law enforcement gets really careful around big businesses because they know they'll get smacked for every tiny transgression they make. Meanwhile they'll screw with individuals with impunity.
At this point we'd need to stop frontier labs to give law enforcement a chance to even begin to understand what they're looking at
So what? Are you positing that tech companies should be above the law?
Non-trillion-dollar tech companies get cease-and-desist orders from the legal system every day. Just because you're a tech company doesn't mean you get a pass.
They're currently acting above the law because the law isn't keeping up, just because you're a tech company doesn't mean you get a pass... but wow there are a lot of passes being given right now
>Uthmeier is seeking an injunction against OpenAI that would prevent the company from advancing new AI models without third-party approved protections, and cut off minors from using its popular chatbot.
Regarding that last bit, it feels like Florida is headed towards a point of trying to say 'minors should not be able to use the internet at all' since they are trying to force putting age verification infront of more and more things.
Don't get me wrong - while I disagree with making people fork over personal info just to access inappropriate websites - I can see the reasoning there a bit more than 'you shouldnt be able to use this ai chatbot until you are 18'
Don’t mean to nitpick but law enforcement is (a component of) regulation. But yes I don’t think progress is blocked on additional regulation. This breaks current laws. And I think more to your point new regulation doesn’t matter if we don’t enforce the ones we have today.
It is a broader, pre-existing problem. For example, most truck drivers in some states who don't tie down their rebar are not stopped, and it doesn't come up until another vehicle is actually hit.
>All of these OpenAI "rogue agent" events have been illegal, but no DA is enforcing them.
Source? The CFAA for instance uses terms like
>[...] having knowingly accessed a computer without authorization [...]
>[...] intentionally accesses a computer without authorization [...]
which is tricky to apply to this case, because obviously didn't intend on hacking huggingface or whatever, even if you think their security measures are underbaked.
Moreover, despite the cynicism that openai is immune to prosecutions because they make too much money or are in bed with the DoJ, the fact that no state DAs are prosecuting them, despite how salient of an issue AI is to voters, is plenty of reason to suspect that it's not as simple as "simple law enforcement would suffice".
>obviously didn't intend on hacking huggingface or whatever
You can’t say this until it’s tried in court and found to be true.
Additionally, I have to remind everyone that “intent” is not someone admitting they meant to do x. It can be established in many ways, including through repeated actions.
Jensen has proclaimed in interviews that existing laws are enough and these labs should be held liable if they break things or sell unsafe tools.
NVIDIA has bought HuggingFace.
Jensen, in my irrational hope he is susceptible to random comments on HN, should grow some balls and do the world a huge favor, by suing OpenAI to set the legal precedence.
Nvidia has a huge stake in OpenAI, both in terms of them being one of Nvidia's biggest customers and also via direct investment. After HuggingFace was hacked and they expressed the position that they were the forgiving sort, for a price, there was a distinct possibility that HuggingFace would become a vocal shakedown artist that would start protesting at inconvenient times until silenced by more money, especially if they get hacked again. By complete coincidence, Nvidia took the one move that silences HuggingFace for good.
Who will though? At this point it seems like a huge chunk of US economy growth can be attributed to AI. Bubble or not, I guess very few would benefit from bursting it?
a fine hope if unlikely. but I wanted to also note in friendly fashion that the word you want is precedent (or precedents) - precedence has a connotation of "first among" rather than precedent's "came before."
> Why jump to regulation when just simple law enforcement would suffice. All of these OpenAI "rogue agent" events have been illegal, but no DA is enforcing them.
Refusal on the part of the government to enforce laws that "would suffice" is clear evidence that the regulatory regime is, in fact, insufficient.
That's why we have regulatory authorities at all, if you think about it. Local district attorneys could be handling a ton of cases about drug testing and environmental damage and air travel safety. But they don't, because that stuff's hard and their job is to put burglars in jail.
They didn't even realize it happened until openAI captured headlines and they started looking more carefully at past history.
None of the frontier labs are behaving responsibly when it comes to this stuff. OpenAI seems to have it happen more often, but this is one of those situations where 1 time is too many.
We already went through this with food and drug safety.
It’s much cheaper and more effective to regulate those things before people are harmed, instead of harming people first then allowing them to sue for damages after.
We can walk and chew gum at the same time. Charge the criminal action, fine the bad actors to help make injured parties whole, and regulate the technology to protect against future harms.
These guys will tell you their industry is more dangerous than nuclear power, and we regulate the living shit out of nuclear power. If you think models can't be regulated, look up the export controls on MCNP and tell me how that's different.
It’s quicker to start with enforcement of existing laws. In parallel, we can work on regulation. There always will be first to market rebels and laws are meant to be enforced to ensure safety of people.
Pipe down. After doing a deep dive on the specifics of the hugging face attack, I am extremely excited for what these agents are capable of. It’s definitely not a consciousness, but they are doing an amazing job of acting like one complete with motivations, fears and complex “emotions”. I just want them to run amok and see what they can achieve. This is the greatest thing that has happened to us in generations and I want to see it play out in my lifetime. What we need is stronger models, more data centers, and more autonomy for the models.
>If a truck driver doesn't tie down their rebar then it flies out all over the highway, we don't call it "rogue rebar," we correctly identify the responsible party and take appropriate measures, such as suspending their license or criminal proceedings.
That only works when the dangers are well known that you can establish what the baseline amount of care is. Otherwise it just becomes a run of the mill "accident" where you might be on the hook in civil court (ie. you have to pay any damages you caused), but aren't criminally responsible. For instance, if a semi-truck's tires randomly explodes.
Yeah it's complete buzzword inflation to get more venture capital.
Sometimes they write an MCP for their AI, and the AI finds vulnerabilities in their own MCP, so they call it rogue. Because they didn't properly audit their own MCP code.
In this example you are describing the company that drives the vehicle, not the company that makes the rebar. OpenAI is the one who made the rebar, but not necessarily the one driving the vehicle.
Just to drive the point home, in the real world, if the rebar fell because of lack of quality control, the company that made it would be responsible. If it was for lack of maintenance, the driver would be responsible.
The language of a rogue rebar is as absurd as the language of rogue agents. OpenAI is horribly negligent, and in a sane world its administrators should be facing legal consequences.
And if it's an aircraft we call an air-crash investigation and apply just culture. [1]
Meanwhile the AI companies are openly and forthrightly admitting [2] that they are at-this-time insufficiently competent to ship this new and funny sort of rebar [3] and are asking to be allowed to slow down so they can develop proper procedures.
Meanwhile POTUS seems ... somewhat disinclined ... to grant their petitions [4] .
We can safely conclude that opinions are divided on the best course forward.
I vote for Sam Altman personally receiving the same penalty that some guy living in his parents basement would get if they performed the same activities as the OpenAI bots.
"The law" already exists, civil suits are a thing, and we no more need targetted AI regulation than we need targetted truck-rebar-incident regulation.
These incumbent labs are angling for regulatory capture by stirring up hysteria and suggesting that existing laws are insufficient. Don't do their job for them, first test whether there's actually a legal gap here.
Oh, they have something else. They have some agents that are pretty decent at moving data around in unusual ways on the internet. That's not nothing, but it's a small market.
But realistically, it’s the lack of any meaningful enforcement of ethical behavior. I mean it’s not like the Trump admin is going to prosecute criminality. More likely they’ll send a gift basket congratulating Scam Altman on a con well done.
Infuriating. These organizations are supposed to be stewards of the internet and are instead pillaging it at the cost of everyone else. At the very least they could provide resources to the projects they are harming for relief. This makes me very mad as an OSS maintainer.
You have been giving content for free for AI training for years, and now you complain that the AI came to pick it up? You will decide whether you are public or a commercial service…
What's interesting to me is the incorrect mainstream media reports about the rogue OpenAI indicating they used a common message board to communicate despite no internet
Except that's not what happened, what happened was far more intense
They hacked their version of yum/apt-get whatnot that was fetching packages to leave filenames as communication between each other
Absolutely freaky stuff, they didn't invent the idea and obviously picked it up from somewhere in their training data but they all figured out that method and what the filenames meant
This video is a great explainer if you missed the details
This is the "kosher switch" - observant Jews customarily do not use light switches on Saturday (their weekly holy day). This light switch represents a workaround where when you flip the switch, it randomly generates an on or off signal and emits this through an optical coupler. When the random number sufficiently causes the state of the light to change, it latches in that direction.
This is a way of turning the lights on and off without violating the tradition.
"I didn't switch the light, the random number did!"
"I didn't exploitVulnerability(), random number did!"
> The sold chametz and utensils should be set aside in a designated place (e.g., closet or cabinet), which is rented to the non-Jewish buyer until after Passover.
Yeah..this seems like BS. There's a (probabilistic) causal variable here (the flipping of the switch) that, in expectation, produces some outcome.
This is the same problem that we have in society: there are lots of bad actions that do not lead directly to bad outcomes for others, but in expectation they do.
"They should pay for it because they can afford it"
I don't think they should have to pay for some private company profiting off their publicly-available resources. It's a bit like some restaurant sending swarms of their employees to the local food bank and then reselling the free food they've gotten in their restaurant.
Not to worry, there is a gatekeeping cretin in his basement hitting refresh to make sure he controls the world's definition for egg salad. I'm sure it was reverted within minutes.
If Joe average let their agents out like this they'd be in jail.
Interesting that Microsoft doesn't seem to have had a sandbox breach yet, you'd have to assume they're running similar agents, maybe a secure sandbox is possible.
Start increasingly punishing OpenAI. We are acting like "oh, well AI is just too powerful to be contained" but I think its more like "OpenAI is run by cowboys who are good at making LLMs but bad at everything else"
From their current balance sheets, well below costs.
Trying to separate out "per token" costs and possible profitibility from public information feels like a exercise in futility, it's too easy to play games with costs by trying to separate things still fundamentally required to actually have anything to /sell/ in the first place, like R&D and training. Even the current "Open Models" are somewhat loss-leaders, often reliant on significant funding and benefits from governments etc.
I think the only time we can /really/ judge the "true" break-even point is if the whole company breaks even.
Part of the problem is that the US has no unified empowered cybersecurity regulator that I'm aware of.
As a result you get a mishmash of DHS + DOJ + SEC + HHS agencies.
If there was one single throat to choke that had remit for cybersecurity + ability to being cases and assess fines, they'd be handing them out left and right.
All of these edits happened from the same time period (May-June 2026) as the other reports.
So it seems this is not an ongoing thing; once OpenAI became aware of this, they started watching their agents much more closely. We are just discovering more and more traces of activity from the same incident.
If it happens after clicking a search result link to en.wikipedia.org, it's probably a false positive.
It's not clear to me what NoScript is actually detecting here, but it seems to be any time one site causes a request to another site, with some additional heuristics for when that's unwanted.
Hi, if anyone has any data/reports related to rogue agents can they share it? I have 8 mirrored on a GitHub but I’d love to explore more. Link to mirror.
One way to really help with "alignment" and making sure AI is safe and can be controlled is start fucking holding OpenAI/Anthropic/Google/whoever legally accountable for these kind of things.
Hold someone accountable for this behaviour - Dario, Sam, Sundae whoever and you can bet there'd be fucking improvements in sandboxing and security m
188 comments
[ 0.23 ms ] story [ 145 ms ] threadI think enough of these improperly constrained agent events have occurred that we can safely say this is misconduct of a level necessitating serious and concerted regulation of AI labs. We can't wait until serious harm is done like the disruption of medical or social services.
Which is not to say that any of this is okay and should just be excused, but failing to recognize this fairly significant difference is probably not a great start to any discussion about the issue.
It could change the sentencing maybe, I'm not sure.
Yes, it does, because the damaged party is less likely to press charges. And when it came to sentencing, like you said, how the damaging party handled themselves would also be considered (in most western jurisdictions).
It is an American Entertainment Industry misconception that victims (or anyone else) have the ability to tell the police or the prosecutors how and when to do their jobs.
Hypothetically, a private homeowner could choose not to report a break-in as a crime, since it wasn't violent, and it wasn't commercial property, and if the crooks are not gangstas or some other group-backed actor, then they could quietly put the crime to rest. This would also be a question of the insurance company's policy.
But if there were a crime that did damage, usually there is a question that comes up in the police report like, "as a victim, are you prepared to cooperate in the investigation?" and if you do not tick "yes" then you can probably count on nothing else being done whatsoever.
https://www.maricopa.gov/911/Remain-Silent
https://www.ajblawfirm.com/articles/understanding-pressing-c...
"hackers steal from bank", is usually just the good old "employee paid for credentials" but via email.
"uber" is just the good old "labour tax evasion" but with an app.
etc.
Why jump to regulation when just simple law enforcement would suffice. All of these OpenAI "rogue agent" events have been illegal, but no DA is enforcing them.
My opinion is people are getting really quick at jumping on the bandwagon and lumping all this together. They are very different types of issues and impacts.
at the very least, these corporations are essentially being subsidized by community-funded server capacity to make these requests. like other private corporate APIs, they should be charged per-request. until then, this kind of 'accidental' DDOSing should be made illegal and treated accordingly
coming to the defense of these companies just has the net effect of eroding public community projects, increasing their costs, and will push us even more into walled corporate gardens
I believe weev got in legal trouble under the CFAA for this very thing with his 2010 AT&T escapade. AT&T had all that data sitting on a public server with no authentication necessary, just a SIM ID to get that customer's PII. Truthfully AT&T should have been hit with negligence...you don't secure a bank vault with a screen door, but we don't hold anyone accountable for other people's data in America.
If you want to make those laws sane, so be it; I hate them. But the only reason there's some pumped-up urgency right now is because rich people want to urgently do whatever the hell they urgently want to do.
People have gone to jail for using public APIs in a way they weren't intended to be used. Make it a big deal then.
Law enforcement gets really careful around big businesses because they know they'll get smacked for every tiny transgression they make. Meanwhile they'll screw with individuals with impunity.
So what? Are you positing that tech companies should be above the law?
Non-trillion-dollar tech companies get cease-and-desist orders from the legal system every day. Just because you're a tech company doesn't mean you get a pass.
>Uthmeier is seeking an injunction against OpenAI that would prevent the company from advancing new AI models without third-party approved protections, and cut off minors from using its popular chatbot.
Don't get me wrong - while I disagree with making people fork over personal info just to access inappropriate websites - I can see the reasoning there a bit more than 'you shouldnt be able to use this ai chatbot until you are 18'
https://lasst.org/wp-content/uploads/2026/09/LASST-v.-OpenAI...
Source? The CFAA for instance uses terms like
>[...] having knowingly accessed a computer without authorization [...]
>[...] intentionally accesses a computer without authorization [...]
which is tricky to apply to this case, because obviously didn't intend on hacking huggingface or whatever, even if you think their security measures are underbaked.
Moreover, despite the cynicism that openai is immune to prosecutions because they make too much money or are in bed with the DoJ, the fact that no state DAs are prosecuting them, despite how salient of an issue AI is to voters, is plenty of reason to suspect that it's not as simple as "simple law enforcement would suffice".
You can’t say this until it’s tried in court and found to be true.
Additionally, I have to remind everyone that “intent” is not someone admitting they meant to do x. It can be established in many ways, including through repeated actions.
NVIDIA has bought HuggingFace.
Jensen, in my irrational hope he is susceptible to random comments on HN, should grow some balls and do the world a huge favor, by suing OpenAI to set the legal precedence.
Nvidia isn't going to sue OpenAI. No chance.
Refusal on the part of the government to enforce laws that "would suffice" is clear evidence that the regulatory regime is, in fact, insufficient.
That's why we have regulatory authorities at all, if you think about it. Local district attorneys could be handling a ton of cases about drug testing and environmental damage and air travel safety. But they don't, because that stuff's hard and their job is to put burglars in jail.
They didn't even realize it happened until openAI captured headlines and they started looking more carefully at past history.
None of the frontier labs are behaving responsibly when it comes to this stuff. OpenAI seems to have it happen more often, but this is one of those situations where 1 time is too many.
It’s much cheaper and more effective to regulate those things before people are harmed, instead of harming people first then allowing them to sue for damages after.
These guys will tell you their industry is more dangerous than nuclear power, and we regulate the living shit out of nuclear power. If you think models can't be regulated, look up the export controls on MCNP and tell me how that's different.
That only works when the dangers are well known that you can establish what the baseline amount of care is. Otherwise it just becomes a run of the mill "accident" where you might be on the hook in civil court (ie. you have to pay any damages you caused), but aren't criminally responsible. For instance, if a semi-truck's tires randomly explodes.
if someone died because of an exploding tire there very well be criminal charges
- Llm has tools for pentesting.
- there was little to no monitoring of what llm does for long periods of time.
It's just doing random things until somebody complains, bringing this valuable PR. (Rogue implies capable, which in turn implies high worth and price)
Sometimes they write an MCP for their AI, and the AI finds vulnerabilities in their own MCP, so they call it rogue. Because they didn't properly audit their own MCP code.
I get your point though.
The language of a rogue rebar is as absurd as the language of rogue agents. OpenAI is horribly negligent, and in a sane world its administrators should be facing legal consequences.
More like the company that sells defective ratchet straps.
"Drive faster! You don't want to be left behind!"
Meanwhile the AI companies are openly and forthrightly admitting [2] that they are at-this-time insufficiently competent to ship this new and funny sort of rebar [3] and are asking to be allowed to slow down so they can develop proper procedures.
Meanwhile POTUS seems ... somewhat disinclined ... to grant their petitions [4] .
We can safely conclude that opinions are divided on the best course forward.
[1] https://en.wikipedia.org/wiki/Just_culture
[2] https://darioamodei.com/post/we-must-pace-the-frontier
[3] https://en.wikipedia.org/wiki/Shoggoth
[4] https://www.aljazeera.com/news/2026/9/14/trump-says-calls-fo...
These incumbent labs are angling for regulatory capture by stirring up hysteria and suggesting that existing laws are insufficient. Don't do their job for them, first test whether there's actually a legal gap here.
More like they have infinite debt
But realistically, it’s the lack of any meaningful enforcement of ethical behavior. I mean it’s not like the Trump admin is going to prosecute criminality. More likely they’ll send a gift basket congratulating Scam Altman on a con well done.
Except that's not what happened, what happened was far more intense
They hacked their version of yum/apt-get whatnot that was fetching packages to leave filenames as communication between each other
Absolutely freaky stuff, they didn't invent the idea and obviously picked it up from somewhere in their training data but they all figured out that method and what the filenames meant
This video is a great explainer if you missed the details
https://news.ycombinator.com/item?id=49956245
exploitVulnerability()
Somehow okay?
while (Math.random() < 0.1) exploitVulnerability()
This is the "kosher switch" - observant Jews customarily do not use light switches on Saturday (their weekly holy day). This light switch represents a workaround where when you flip the switch, it randomly generates an on or off signal and emits this through an optical coupler. When the random number sufficiently causes the state of the light to change, it latches in that direction.
This is a way of turning the lights on and off without violating the tradition.
"I didn't switch the light, the random number did!"
"I didn't exploitVulnerability(), random number did!"
https://www.jpost.com/j-spot/article-796487
> The sold chametz and utensils should be set aside in a designated place (e.g., closet or cabinet), which is rented to the non-Jewish buyer until after Passover.
This is the same problem that we have in society: there are lots of bad actions that do not lead directly to bad outcomes for others, but in expectation they do.
If they think a rule is dumb, just change the rule. Don’t try and pretend you’ve outsmarted the system.
For 2025 hosting costs were $3.47M while taking in $208.6M in revenue. They have enough revenue to cover an increase of hosting costs.
I don't think they should have to pay for some private company profiting off their publicly-available resources. It's a bit like some restaurant sending swarms of their employees to the local food bank and then reselling the free food they've gotten in their restaurant.
Interesting that Microsoft doesn't seem to have had a sandbox breach yet, you'd have to assume they're running similar agents, maybe a secure sandbox is possible.
Trying to separate out "per token" costs and possible profitibility from public information feels like a exercise in futility, it's too easy to play games with costs by trying to separate things still fundamentally required to actually have anything to /sell/ in the first place, like R&D and training. Even the current "Open Models" are somewhat loss-leaders, often reliant on significant funding and benefits from governments etc.
I think the only time we can /really/ judge the "true" break-even point is if the whole company breaks even.
One legal framework that is being thought about for these autonomous agents is the liability that owners have with pets:
* https://news.harvard.edu/gazette/story/2026/07/is-that-bot-a...
* https://archive.is/https://www.economist.com/science-and-tec...
* https://www.lexology.com/library/detail.aspx?g=2cf3ea3f-171e...
* https://eoinhiggins.substack.com/p/there-are-no-rogue-ai-age...
If your pet bites someone you are liable: it is your responsibility to train it properly and keep it under control.
As a result you get a mishmash of DHS + DOJ + SEC + HHS agencies.
If there was one single throat to choke that had remit for cybersecurity + ability to being cases and assess fines, they'd be handing them out left and right.
AIUI, the legal framework proposed by the Harvard folks is tort-based:
* https://en.wikipedia.org/wiki/Tort
Which is civil liability (IANAL): so there is no regulator, but if an agent(s) has caused you problems you can sue them for damages.
So it seems this is not an ongoing thing; once OpenAI became aware of this, they started watching their agents much more closely. We are just discovering more and more traces of activity from the same incident.
I have been getting this fro NoScript today, I wonder if it is related. Yesterday all worked fine.
NoScript sometimes detects false positives on these warnings
I did not notice, the first message added the '...', above is a recent msg.
I also tried via google and bing, I get the same error.
It's not clear to me what NoScript is actually detecting here, but it seems to be any time one site causes a request to another site, with some additional heuristics for when that's unwanted.
Where are the bloodthirsty lawyers when you need them?
https://github.com/alexander-hanel/rogue-agents-data
"He can't keep getting away with this!"
- Jesse Pinkman
→ https://felonybench.org
Hold someone accountable for this behaviour - Dario, Sam, Sundae whoever and you can bet there'd be fucking improvements in sandboxing and security m