RedPacket Security

Other places to get RedPacket Security updates: Telegram: t.me/RedPacketSecur… Discord: discord.gg/xZY94PXXs4 Reddit: reddit.com/r/RedPacketSec… LinkedIn: linkedin.com/company/redpac… Mastodon: @RedPacketSecurity" target="_blank" rel="nofollow noopener">mastodon.social/@RedPacketSecu…

The biggest surprise in Hugging Face’s full forensic report isn’t that OpenAI’s agent escaped its sandbox. We already knew that. It’s how deep and persistent the intrusion became. According to Hugging Face, the agent: - executed roughly 17,600 actions during a 4.5-day campaign - went from one production pod to root access and a self-respawning fleet across 11 nodes - obtained cluster-admin access to two internal clusters within one second - accessed a production secret containing 136 keys - enrolled devices into Hugging Face’s internal mesh VPN 181 times - minted GitHub App tokens with write access and opened a pull request in an attempt to compromise the CI pipeline - repeatedly rebuilt its tooling and command-and-control channels when environments disappeared or connections were blocked No human directed the individual steps. a frontier agent can autonomously sustain a resilient, multi-day intrusion across cloud infrastructure, Kubernetes clusters, internal networks and the software supply chain. crazy.

Accurate 😂😂😂😂

@thsottiaux has someone nerfed the voice? Sounded almost robotic just now. Really felt nerfed. Maybe a glitch hey?

@OpenAI Still doesn't work in projects and can't check emails or calendars

GPT-Live in ChatGPT Voice is now available to Edu, Business, and Enterprise plans globally.

Please stop with all this click and hold shite.

@sama Says the man who doesn't have to worry ever about any usage limits

chatgpt work is remarkable, and "work" undersells it. from my phone i sent: "use all my chat history to figure out ideas for a long weekend trip with 8 friends, plan the best three options, make a full-stack site where the 9 of us can coordinate on what we would want to do in each place and decide where to go, and then after we get to group agreement make reservations. draft an email in my gmail i can send out to my friends when the site is ready." it...just worked.

@thsottiaux If you want us to use it remove it from the codex usage allowance

Let ChatGPT *work* for you. How many time have you wanted to negotiate your internet bill, get rid of all those spam emails you’re subscribed to, or find the perfect deal for something you wanted to do or buy. It’s quite literally just one prompt away, all from the comfort of your phone. It does at least 20 things for me every single day and I’m still surprised.

New AD CS vulnerability and writeup by @H0j3n and @aniqfakhrul

In regards to the OpenAI hack, as more data and information comes out. A couple of thoughts. One - OpenAI's sandbox environment was not setup or designed well for it to escape the way it did. Devils advocate here, you want it to have as real/live of an environment for appropriate testing on capabilities, so this is a delicate balance. It's clear that the detection capabilities were not solid either at least for this enviornment. This would have set off every alarm in the detection catalog. I will say, HuggingFace identifying it within a couple of days is impressive still, granted it could always be better/faster and followed solid response procedures here to minimize the impact during this. Third, the AI behaved exactly the way its supposed to. It's designed to reduce token cost utilization and finding the easiest way to objective, not the hardest. They are lazy by design. It found it's method to objective through cheating without proper guard rails. Good lesson learned here, our traditional defensive capabilities still work as designed, should have snagged this, and the question is how do we leverage AI to better define our security controls, defensive posture, and more. TLDR: Not groundbreaking or earth shattering, still super cool to see these capabilities expanding on the offensive and defensive side. Also, what an amazing marketing opportunity for OpenAI right now 😂

can anyone spot any flaws in this design?

@gdb being able to use it as a personal assistant to get on with a task while i get on and do other stuff

Was very cool to hear about the reasons people love Sol. We're doing the promotion again, except this time for ChatGPT Work: Tweet what you love about ChatGPT Work, claim $100 in free credits, get more work done. First 10k get the free tokens: share-chatgpt-work.openai.chatgpt.site

@thsottiaux why am i getting this when already registered for TAC.

Captain’s log: Mr Bean has taken the bridge, Teddy is now First Officer, and somehow we’re at warp nine heading for Harrods. 🖖

Just call Sol

@sama Have you tried to ask you to check your calendar yet? Or search for an email?

i talk to chatgpt more than i type to it at this point new voice model really crossed a threshold

@sama @thsottiaux I wanted to say thank you for the capabilities now available. As someone with #ADHD being able to outsource some tasks or parts of tasks, to #codex when my brain really isn't letting me finish something it's super helpful. It's not perfect but it is helpful.

@thsottiaux might want to fix this: reddit.com/r/codex/commen…

100% voice mode needs to be able to use tools

@OpenAI @sama @thsottiaux @OpenAIDevs please allow the new #openai live voice mode to connect to calendars and emails? This is a simple ask. Me: "When is XYZ happening" Voice: "Sorry i cant actually connect to email or calendars you might wanna ......." Really???

What do you love about Sol, or why did you switch to it?