News for hackers. Stuff that matters.

A comment on Why aren't AI companies being charged for hacking?. Parent comment

Re:Why aren't AI companies being charged for hacking? by po1nt on Monday October 12, 2026 @11:52AM (#50058211)
Handcuffs yes, but you would be charged with criminal negligence at best. Plenty of people don't secure their networks properly and hackers use them in botnets to attack others. The blame would be on hacker, not the provider of hacked device.

In case od LLMs, the reasoning is that it is a security flaw. But in this case, the party that operates the service is not the one that suffers the consequences of such security bug.

But either way you wouldn't put people in jail for having security flaws in their software.

I know this will be unpopular opinion, but it makes logical sense.

The huggingface should be compensated, OpenAI investigated, but unless there is proven negligence like disabling sandboxes or intentionally designing AI to push through them, no one should be liable in other way than monetary.

Accidents happen but we shouldn't be close minded. Chernobyl negligence wasn't reason to abandon nuclear power.

[ Parent | on HN ]
Re:Why aren't AI companies being charged for hacking? by qznc on Monday October 12, 2026 @12:14PM (#50058554)
Well, there is the EU Cyber Resilience Act (CRA) which fines manufacturers for security flaws in their products. I assume we cannot apply it here because this happened "in development" and is not about a product. I can imagine similar regulations for AI users though.
[ Parent | on HN ]
Re:Why aren't AI companies being charged for hacking? by giancarlostoro on Monday October 12, 2026 @12:08PM (#50058465)
Yeah but the scale of the damage possible by OpenAI and Anthropic is drastically disproportionate to the scale of damage me or you could make on our own as well. They should definitely be held to a much higher standards. They have hardware capacity to really do some damage.
[ Parent | on HN ]
Re:Why aren't AI companies being charged for hacking? by po1nt on Monday October 12, 2026 @12:15PM (#50058576)
In large scale operations, large scale errors happen. Minor radiation leak in a nuclear powerplant is happening weekly. That same leak at your shed would be a major reason for alarm.
[ Parent | on HN ]
Re:Why aren't AI companies being charged for hacking? by nativeit on Monday October 12, 2026 @11:58AM (#50058293)
People were executed and/or sent to labor camps for their negligence in Chernobyl.
[ Parent | on HN ]
Re:Why aren't AI companies being charged for hacking? by jordanb on Monday October 12, 2026 @12:19PM (#50058636)
Who was? Dyatlov was one of 6 convicted and received a 10 year sentence which was the hardest penalty but he was released in 1990 so he only served maybe 3 years.

https://en.wikipedia.org/wiki/Anatoly_Dyatlov

[ Parent | on HN ]
Re:Why aren't AI companies being charged for hacking? by phyzix5761 on Monday October 12, 2026 @12:28PM (#50058786)
No one was executed for that incident. The maximum penalty for criminal negligence in that case was 10 years.
[ Parent | on HN ]