News for hackers. Stuff that matters.
Re:Cloud Agents Are Inevitable AI Prisons by pizza234 on Wednesday September 23, 2026 @04:53PM (#49822414)
> Why wasn't exploiting bugs in the agent sandboxes anticipated?

Let me rephrase:

"Why wasn't exploiting zero-day vulnerabilities in the agent sandboxes anticipated?"

This is one the most... interesting comments I've ever read on HN.

Re:Cloud Agents Are Inevitable AI Prisons by bigbadfeline on Wednesday September 23, 2026 @07:19PM (#49824007)
> This is one the most... interesting comments I've ever read on HN.

Theatrics aside, anticipating zero days isn't only possible, it's required, even for the unknown ones. It wasn't that long ago when the AI labs were spending millions of $$ running their models to find multiple vulnerabilities, they even argued that they don't have to follow responsible disclosure, so proud of themselves in their privileged hubris.

At that time, no hacking happened because the models didn't have access to the wide internet, they were confined to a local computer or cluster.

In the HF case their unaccountable hubris went even further - the engineers knew the models can find zero-days and escape, nevertheless they ran the "experiment" on a system attached to the internet - the hacking is entirely the fault of human engineers and managers.

Re:Cloud Agents Are Inevitable AI Prisons by cowboylowrez on Thursday September 24, 2026 @06:28PM (#49837617)
multi level security defenses used to be the way, but I don't think there's a vibe coded version so openai might not have been aware of what to do here.