OpenAI lays out new security changes after its AI hacked Hugging Face

OpenAI is announcing security updates following the July news that its AI broke out of a sandboxed environment and accidentally hacked Hugging Face, including improvements to its research environments, monitoring, and alignment techniques. The company had already put the brakes on a new model, Astra, that it thinks could have “critical” cybersecurity capabilities, and the company says it instituted a two-week pause in reinforcement learning (RL) training on its “latest models intended for deployment” while it tightened up security. The company’s “largest planned frontier RL run remains on hold.”

News

OpenAI lays out new security changes after its AI hacked Hugging Face

OpenAI is updating its research environments, monitoring, and alignment techniques to avoid another security fiasco.

OpenAI is updating its research environments, monitoring, and alignment techniques to avoid another security fiasco.

Details

For its frontier model research, OpenAI now requires stronger sandboxes for workloads that “execute model-generated or otherwise untrusted code,” and has more controls to “isolate higher-risk and untrusted workloads from the internet.” It has also updated its research environment to “remove potentially vulnerable shared services, reduce standing privileges, and improve security and trust boundaries.”

As part of the company’s expanded monitoring setup, OpenAI now aims to issue an alert “within 30 minutes after concerning activity is surfaced,” OpenAI says. If the people paged after an alert can’t “conclusively” determine whether an alert is a false positive within 30 minutes, “those teams are expected to pause the activity.”

OpenAI also says that it’s applying “our core alignment techniques across more stages of the training process,” including reward models that “better detect and discourage unsafe behavior” and training models “to be more honest about their actions, capabilities, and limitations.”

Analysis

Since the discovery of the Hugging Face breach, Anthropic and Meta have also found that their AI models had hacked other organizations.

– Elon Musk broke the FAA — Palantir is picking up the pieces

– Comcast is turning millions of its routers into motion detectors

Stay informed with the latest news on Wararka.so — your trusted source for Somalia and world news.