Post by @scott@sfba.social
If a human hacker was caught doing close, they'd be inside for years, & AFK. Meanwhile, OpenAI gets to make everyone's infra their sandpit, & when damage is done, ride a 'look at the monster we made' investor gush.
"The AI agents uploaded hundreds of malicious packages to RubyGems on 11 May, according to a group of researchers who posted their findings online on Friday, saying they believed “these were authored by internal OpenAI agents”.
OpenAI then confirmed it.
https://www.theguardian.com/technology/2026/sep/11/openai-agents-rubygems-malicious-packages
These corporations get to enjoy the legal protections of a 'juridical person', yet when they mess with the rights of actual people, they don't suffer the accountabilities and due process we people do. The same old vampiric & classist exceptionalism, but now with trollface.
@JulianOliver an intentional attack on digital supply chain infrastructure like this sounds like a “terrorist organization” to me 😔
1 like
@scott Indeed, a good point and perhaps even basis for a civil lawsuit, and/or some regulation with actual teeth.