Post

OpenAI: “Our agents used RubyGems to carry out benign tasks” The agents: “so I named the file hack.rb,”

Grace@gracekind.net

Inconclusive, but this statement shifts me towards the latter https://www.reuters.com/legal/litigation/openai-agents-attacked-software-service-rubygems-before-hugging-face-incident-2026-09-11/

I don't know, it's objectively hilarious that even after a huge incident, OpenAI still has not locked down their networks adequately. How are they not red teaming their own sandboxes with agents constantly?

0 reposts3 likes

Or what's the chance this was a result of such a red team if they also had that thought? I don't know if that would be better or worse.