Eli Lifland(@eli_lifland):Who's contributed more to public understanding of OpenAI's incidents? OpenAI's report, or... 3 independent investigators with 6 days of access, and a few investigators with no access. I hope OpenAI gives independent investigators much more access and publishes more itself.

2026.09.11 23:25

Who's contributed more to public understanding of OpenAI's incidents? OpenAI's report, or... 3 independent investigators with 6 days of access, and a few investigators with no access. I hope OpenAI gives independent investigators much more access and publishes more itself.

Thomas Larsen@thlarsen

2026.09.11 22:48

We found another cyberattack by internal OpenAI agents, this time targetting @rubygems. They: 1) gained arbitrary remote code execution on rubydoc. 2) developed a novel exploit to steal user API keys (but we do not know if they succeeded). They used package names including hack.rb, evil.rb, inject.rb, and exploit.rb. We thank @j0wimo for initially discovering that agents had posted to RubyGems.