THIS IS DISINFORMATION
The PHP exploit Nate is talking about was found by AI-enabled defensive operations. There is no evidence of large scale exploitation. This is a huge win for defense running ahead of offensive.
This is something I’m quite worried about and have been talking with researchers about recently. We really don’t know what labs are doing and therefore can’t study it.
I have never seen an AI model come up with an amazing idea that I hadn’t already thought of for a problem I’m working on. And the typical idea quality is garbage.
Wow, OpenAI only allowed METR to look at six days of an incident that happened over the course of ~2 months? And the entire investigation was done by three people over the course of a few days?
Who could have possibly predicted this /s