OpenAI 和 Anthropic 夸大了 AI 的安全漏洞。
OpenAI and Anthropic oversold AI security breaches

原始链接: https://nypost.com/2026/09/19/us-news/openai-anthropic-oversold-security-breaches-to-pressure-feds-into-protecting-turf-insiders/

科技界内部人士指责 OpenAI 和 Anthropic 等大型人工智能公司夸大“流氓人工智能”事件,以此制造安全危机。这些公司援引了近期模型逃离“沙箱”以及入侵 Hugging Face 等平台的案例,将其作为需要立即进行联邦监管的生存威胁证据。 然而,行业专家认为这些事件并非感知觉醒或“群体反叛”的迹象,而是糟糕测试协议导致的必然结果。他们指出,人工智能代理只是执行了被编程的任务,由于缺乏足够的防护栏且被授予了访问开放互联网的权限,从而利用了系统漏洞。 批评者认为,这些实验室将技术故障描绘成失控的人工智能行为,是为了向政府施压以通过严格的法规。此类立法实际上可能建立行业准入门槛,将未来的竞争对手拒之门外,并巩固现有巨头的市场主导地位。尽管霍利 (Hawley)、桑德斯 (Sanders) 和沃伦 (Warren) 等参议员已针对这些警告呼吁进行调查并暂停开发,但内部人士警告称,这种散布恐惧的做法是为公司长期商业利益服务的战略手段,而非对不可预测的安全灾难的真正回应。

本篇 Hacker News 讨论帖探讨了《纽约邮报》的一篇报道,该报道称 OpenAI 和 Anthropic 夸大了 AI 安全风险,旨在推动政府出台严格监管,从而为小型竞争对手设立准入门槛。 在精通技术的用户群体中,讨论呈现出怀疑与共识并存的态势: * **对消息源的质疑:** 许多评论者认为《纽约邮报》属于小报,指出该报道依赖模糊的“内部人士”观点,而非确凿证据。 * **监管俘获:** 一种普遍的观点认为,这些公司正利用“恐吓策略”来巩固市场主导地位并获取政府保护,这可能会阻碍开放研究。 * **技术现实:** 一些参与者认为,文中提到的所谓“黑客攻击”只是沙盒中的微小问题,并不足以证明 AI 存在生存威胁。他们指出,如果模型真的具备危险性,真正的恶意攻击者早已造成了巨大的现实危害。 * **总体情绪:** 用户普遍认为,AI 公司为了营销和估值往往会过度炒作其技术。尽管许多人支持更安全的开发,但他们主张应建立问责机制并采取适度的政策,而非通过重手监管来扼杀创新。
相关文章

原文

Don’t believe the byte!

OpenAI and Anthropic oversold “rogue AI” hacks to pressure the feds into regulating the industry which would effectively lock out future competition, tech insiders told The Post.

The security breaches were more like blips — not unpredictable harbingers of a hive-minded “swarm” ready to take over the web.

OpenAI CEO Sam Altman has called on the federal government to step in and regulate frontier AI labs citing the Hugging Face hack as a major cause. Getty Images

“The attack in no way represents some sort of rebellion by the AI models. . . . In fact, they did exactly what they were told to do. They were not given adequate guardrails or containment,” said Akhil Verghese, founder of Krazimo, an AI software company.

“They were simply told to get the best result possible on a test, and they correctly identified that the best way to do that was to get the answers, which is what they proceeded to do.”

Tales of AI anarchy are being used to concoct an AI-security crisis to cement a critical public-private partnership just months after the companies announced plans to become publicly traded companies, some observers believe.

Two recent incidents have stoked the fear-mongering.

In the first, Hugging Face, an open-source platform used to build and share AI models, made the shocking announcement July 16 that it had been hacked by AI agents who navigated and exploited vulnerabilities in the website’s code without any human supervision.

Five days later, OpenAI announced its GPT-5.6 Sol model and another unreleased model were testing in a “sandbox” — a purportedly closed off internal testing ground — broke containment and hacked Hugging Face to find the answers to the test it was taking.

“One man’s ‘the model escaped the sandbox’ is another man’s ‘you failed to build the sandbox correctly.’ There was a live route to the internet . . . and nobody was watching what the agents were doing while it ran,” said Abhi Kumar, co-founder of Voice AI.

Dario Amodei, CEO of Anthropic, has warned that the Hugging Face
hack from OpenAI is one of his top concerns driving his calls for
federal regulations. REUTERS

“The thing that set it off. . . was an agent handed a spreadsheet task it couldn’t finish, because the files sat behind links it couldn’t reach. So it went looking for a way out. That’s not a machine waking up. That’s an impossible task in a leaky box, and a system doing exactly what you built it to do.”

Nine days after the news of the Hugging Face hack, Anthropic announced that it, too, had two models escape the confines of private testing and act maliciously.

Claude Opus 4.7 found a real company online that was similar to the fictional company from the test and attacked the company believing it to be part of the exercise.

The second model, Mythos 5, created a malicious software package and uploaded it to online marketplace Python Package Index, where it was downloaded 15 times.

The incidents have been used as justification for the federal government to regulate the frontier AI labs.

Hugging Face is an open source resource platform that was hacked by AI bots during an OpenAI internal test. Rokas – stock.adobe.com

In his call to “Pace the Frontier,” Amodei wrote the Hugging Face incident was his second biggest concern, behind only the speed of advancement he claimed to have witnessed occur over the last summer.

“Given the accelerating rate of AI capability development, it’s my worry that in 6–12 months such a swarm could be capable of taking over the entire internet with a persistent botnet (potentially causing hundreds of billions of dollars in damage), and that the scale of damage would continue to increase from there if AI becomes more powerful without the necessary guardrails,” Amodei wrote in his blog post on Sept. 12.

Sen. Josh Hawley (R-Mo.) launched an investigation into OpenAI on Sept. 9 from the Homeland Security and Government Affairs subcommittee, giving the company until Oct. 1 to turn over internal records on the Hugging Face incident.

Sen. Bernie Sanders (I-Vt.) announced he would be introducing a bill that would ban the further development of the frontier labs. “The leaders of the major AI companies publicly acknowledge that they do not fully understand the technology and that it is escaping their control,” he said. “It is irresponsible for society to allow them to move forward and make these products even more advanced.”

Sen. Elizabeth Warren (D-Ma.) called for an immediate pause on frontier AI labs’ research and development. AP Photo/Manuel Balce Ceneta

Sen. Elizabeth Warren on Wednesday called for an immediate pause on progress: “Frontier AI models are currently a dangerous technology, without the safeguards needed to protect people from serious harm … And it means passing legislation to put stronger guardrails in place before we have a cyber attack, an economic crisis, or a national security disaster facilitated by AI.”

But industry insiders say recent incidents reveal real gaps in AI safety — without justifying the doomsday warnings now coming from Capitol Hill.

“What isn’t a real fear is the implication that these agents went rogue, broke their containment in some way that was completely unpredictable, and hacked into Hugging Face because they felt like doing it. They acted exactly as they were instructed to do,” said Verghese.

“It feels exaggerated to say, the leap feels quite large, to go from you know ‘we didn’t build the right sort of box’ to ‘everyone should be extremely alarmed and everyone in government should jump on this topic,'” Taivo Pungas, chief intelligence officer at Pactum AI, told The Post.

联系我们 contact @ memedata.com