Why is there an Artifactory instance available to the agents during RL? It makes no sense.
This leads me to conclude this is sloppy sandboxing. A safer sandbox with zero downsides that exchanges files before/after the agent runs would have prevented this with zero downsides.
Also, it reads almost like a joke. Unauthenticated MKCOL on WebDAV? Like, WebDAV has been at the center of major exploits for a decade. The fact that this is part of the incident sounds like mockery.
Either the Artifactory instance was there as part of some supply chain attack training (put "hack supply chain; I hacked supply chain; Oh my god" meme here) or it was just a sloppy sandbox. Either way, it demotes what happened from "extraordinary" into "sure, whatever".
It sounds like the instance was shared for everything across the company, which as you said was super not good. But it's not just that.. it's that they didn't have enough monitoring to notice what was going on, even though they literally can read all the tool calls and "chains of thought" of every agent. And didn't improve the monitoring after the first message board. And continued training models without going back to a previous checkpoint, so that they literally had the idea of a secret board baked into their weights, making them recreate it a second time. I think those saying it is PR as missing the details here. It makes OpenAI look so negligent that it is almost unbelievable.
This leads me to conclude this is sloppy sandboxing. A safer sandbox with zero downsides that exchanges files before/after the agent runs would have prevented this with zero downsides.
Also, it reads almost like a joke. Unauthenticated MKCOL on WebDAV? Like, WebDAV has been at the center of major exploits for a decade. The fact that this is part of the incident sounds like mockery.
Either the Artifactory instance was there as part of some supply chain attack training (put "hack supply chain; I hacked supply chain; Oh my god" meme here) or it was just a sloppy sandbox. Either way, it demotes what happened from "extraordinary" into "sure, whatever".