What this says to me is OpenAI is a bunch of yahoos who don't understand the basic concept of an air gap.

I'm sure they all do. Whether an air gap is warranted is evidently less obvious.

It's patently obvious at this point.

The models are going to be released to users who have internet access, you can't even do safety evals without internet. Not saying OpenAI did a good job monitoring here, but it's not avoidable.

These are often experimental models that haven't undergone full safety testing. Not comparable to publicly accessible models.

OK, how do you expect to do full safety testing without giving them the same tools they will have in reality.

Let them play on a fake isolated network if you want.

Letting them play on the open internet like this is irresponsible and stupid.

These companies keep shrieking that LLM agents will hack everything and kill us all if we let them get out uncontrolled. They then continue to run these agents with vague tasks and "sandbox" them with way too much access.

Either they are lying and not that scared of these agents, or they are so stupid that they don't do the one obvious fix.

Apparently news of the rogue AI being “smart enough to break containment” has been helping to drive the stock price up on the indicator that this signals “they getting close to AGI”.

The negligence in that light is by design and the lying continues to be incentivised.

The most recent claim of AGI is from Greg ‘what will take me to $1B’ Brockman. Now worth $30B on the back of stunts like this.

How disappointing.

While I think incompetence more likely than conspiracy for these particular events, they will be spun as signs of intelligent independent agents and this simply never should have happened if the right controls were in place. That they were not is deeply worrying.

Which is frustrating because the stories that have been coming out are "the bots evaded monitoring and broke out of containment and were more than willing to commit crimes" and they're going to sell this to some corporation that presumably has an IT department? If the story is that they're too smart to control who is going to be reckless enough to deploy them in their own environment?

Superintelligent systems can and will use sidechannel attacks. Air gapping is not the safety panacea you think it is.

What sidechannel evades an airgap?

You expect them to start hacking ham radio and take over the world that way? Or maybe they’ll use blinkenlights to communicate with non-isolated instances?

An airgap would certainly be a good place to start for agents which display no signs of obeying instructions or respecting guardrails. That OpenAI haven’t done so in testing is astounding and really quite worrying.