Post by @JulianOliver@mastodon.social
If a human hacker was caught doing close, they'd be inside for years, & AFK. Meanwhile, OpenAI gets to make everyone's infra their sandpit, & when damage is done, ride a 'look at the monster we made' investor gush.
"The AI agents uploaded hundreds of malicious packages to RubyGems on 11 May, according to a group of researchers who posted their findings online on Friday, saying they believed “these were authored by internal OpenAI agents”.
OpenAI then confirmed it.
https://www.theguardian.com/technology/2026/sep/11/openai-agents-rubygems-malicious-packages
17 boosts
Full Metal Archaeopteryx@DelilahTech@tech.lgbt
Just Bob@justbob@kolektiva.social
jaker@jaker@c.im
virtualmarc@virtualmarc@edgie.me
Mason Loring Bliss@mason@partychickens.net
SlightlyCyberpunk@admin@mastodon.slightlycyberpunk.com
Rafael@raffomania@mstdn.io
Good overview for technical audience here https://thehackernews.com/2026/09/openai-agents-linked-to-rubygems.html?m=1
@JulianOliver Modern Divide and Conquer Strategy, 'shaking down' the masses for further #Capitalism #greed.
What a dull surprise.
@JulianOliver "Innocent man's crowbar smashed jewellery shop window and scooped out thousand of pounds worth of diamond rings, say investigators".
These corporations get to enjoy the legal protections of a 'juridical person', yet when they mess with the rights of actual people, they don't suffer the accountabilities and due process we people do. The same old vampiric & classist exceptionalism, but now with trollface.
@JulianOliver an intentional attack on digital supply chain infrastructure like this sounds like a “terrorist organization” to me 😔
@scott Indeed, a good point and perhaps even basis for a civil lawsuit, and/or some regulation with actual teeth.
Yup, the idea of Limited Liability as a necessary evil on a pragmatic basis has morphed into Corporations are people but with more rights than normal folk. We must all bow down to the mythical shareholder value as the ultimate "good".
@JulianOliver Charles Manson went to prison for the actions of his agents. I see no difference here. Lock them up
@JulianOliver Regardless of whether it was their explicit intention or not, a significant signal sent here is the effectiveness of these systems at laundering responsibility.
They successfully showed (once again) that you can do illegal shit and get away with it as long as you claim that the machine did it. Specifically, that their machine did it.
This is a sales demo.
@JulianOliver @blogdiva Been saying it since the huggingface story broke: Those assholes need to be prosecuted under CFAA. With the Morris Worm verdict, there’s precedent. Lock em up for a couple of decades.
@JulianOliver It's because they're allowed to pretend it's all "autonomous actions" with no causal link to their own actions, instead of the reality that they willfully and specifically programmed their computers to do these things (and then proceeded to not properly sandbox or supervise the processes). You don't get this kind of text prediction without deliberate model calibration after the initial "ingest the entire web" round (or perhaps also some corpus curation for the first rounds).
