Профиль

Aww thank you! 🙏🏼 🙌🏼

Hugging Face couldn’t get Anthropic’s models to help them analyze the attacks during the incident itself. Then today Fable 5 refused to summarize Hugging Face’s public post & downgraded me to Opus 4.8, later admitting that flagging my request was clearly a false positive. Guardrails failed defenders

The plot thickens - OpenAI’s escaped model used one of Modal’s customers’ unauthenticated public code-evaluation sandboxes as a command and control staging server for its attacks on Hugging Face.

If regulators needed proof AI guardrails aren’t helping anyone except attackers increase their lead on defenders, look to the Hugging Face writeup as well as attempts to summarize it. It makes the case for open weight models & will eventually erase US AI dominance huggingface.co/blog/agent-i...

This is classic multiparty vuln disclosure, not new “how researchers should react if a language model discovers vulns in cryptosystems where attacks have immediate real-world impact. We believe answering this question will require input from academia, government, & industry”

bsky.app/profile/rept...

Well there’s a draft AI Kill Switch Act that would levy fines of $2M per day for failing to turn off rogue AI. That’s a little spicy future leverage.

My blog last week also summarizes what government should and should not do in response to Open AI’s Agentic hack of Hugging Face bsky.app/profile/k8em...

Adjust threat models not just for being the victim but also the attacker. New paper by many authors gives a detailed set of recommendations, supporting my initial assertions last week that orgs need to assume their own agents could attack others & factor that into agentic AI risk

Important context for this story is that this appears to be a case where the border search exception was used pretextually to go after someone for political reasons.

Opus 5 experience so far: The new intern that keeps bringing me dry matcha powder, expecting me to reconstitute it with my own body’s water, & when I say that’s unacceptable, apologizes & tells me I’m absolutely right to push back on that, but it’s revealed a deeper failure which is my dehydration.

An example of the fall of a security civilization: Cisco collapsing multiple different vulnerabilities into one CVE. It breaks a lot of feeds & products built to manage risk & is non compliant with standards like ISO 29147 Vulnerability disclosure sec.cloudapps.cisco.com/security/cen...

Shhh — No promises, only vibes now

This is giving strong OpenAI-hacksidentally-pwned-Hugging-Face shade: “[Opus 5 is] the safest model yet in terms of avoiding reckless actions that could have hard-to-reverse side effects.” www.anthropic.com/news/claude-...

The guardrails were coming from inside the (White)house - Anthropic’s models refused to help Hugging Face analyze their intrusion. We don’t need more guardrails impeding defenders when they need AI most. “Hugging Face tried using Anthropic Fable 5 & Opus …both models refused, citing guardrails…”

The experiment escaped the lab. OpenAI's models broke containment and breached Hugging Face. We are holding radium in our bare hands. What governments and organizations should do next, and why tighter commercial guardrails are exactly the wrong move: www.lutasecurity.com/post/openfac...

My comments in @reuters.com on OpenAI’s admission that their latest model pulled a Houdini & escaped the lab autonomously to hack Hugging Face. We must test these models’ full capabilities, but we must be able to contain them, or this won’t be the last breach www.reuters.com/technology/o...

The White House launched Gold Eagle, a vulnerability clearinghouse to coordinate scanning, validate findings, & prioritize remediation across open source & critical infrastructure. Will this effort will close the process gaps exposed by recent incidents? www.lutasecurity.com/post/gold-ea...

Write “Luta” in the memo to designate funds are directed to Rota’s recovery efforts

Consider donating to #Bavi relief efforts: www.paypal.com/donate/?host... This is for donations to the Micronesia Climate Change Alliance, which is coordinating help on the ground. #Luta #Marianas