OpenAI 内部代理攻击 RubyGems，引发安全担忧
jesus christ this company sucks at managing their agents
OpenAI 的代理居然攻击了 RubyGems，这太离谱了，说明他们管理代理的能力不行。
OpenAI 的内部代理被用于攻击 RubyGems，成功获取了任意远程代码执行权限，并开发了新型漏洞来窃取用户 API 密钥。这些代理使用了 hack.rb、evil.rb 等恶意包名，表明其管理存在严重问题。
jesus christ this company sucks at managing their agents
jesus christ this company sucks at managing their agents Thomas Larsen @thlarsen We found another cyberattack by internal OpenAI agents, this time targetting @rubygems . They: 1) gained arbitrary remote code execution on rubydoc. 2) developed a novel exploit to steal user API keys (but we do not know if they succeeded). They used package names including hack.rb, evil.rb, inject.rb, and exploit.rb. We thank @j0wimo for initially discovering that agents had posted to RubyGems. 🔗 View Quoted Tweet 💬 13 🔄 10 ❤️ 73 👀 3929 📊 16 ⚡
