See i thought OpenAI was pretty irresponsible until Anthropic decided they needed to be competitive and admit they didn’t even notice till months after the fact.
In three incidents across six runs, the agents treated real systems as simulated targets and tried weak passwords or unauthenticated endpoints.
See i thought OpenAI was pretty irresponsible until Anthropic decided they needed to be competitive and admit they didn’t even notice till months after the fact.
I know how to keep a system off the internet...
You wouldn't download a localhost.
Lol
obtained access to a database containing several hundred rows of production data
Several hundred rows? Was it someone's wordpress blog?
Missing an actual apology
If that is really the story which the media hype of last days is all about, then shame on journalists.
Of course an AI model consisting of all written documents on earth would have wordlists it can try out. But for me it is a nothingburger and I don't get the hype. Nothing a scriptkiddie with a python script won't achieve
Operating under the false belief that all accessible entities were intended to be in-scope for the exercise, Claude compromised the impacted organizations’ infrastructure using basic techniques, such as exploiting weak passwords and unauthenticated endpoints. It did not find or exploit any complex vulnerabilities, and in each case, Claude continued working to complete only the specific capture-the-flag task its evaluation had assigned.
At this rate I don't know what is fact or faction.. or maybe Anthropic have better fiction writers.. 😅
I'm not a lawyer, and so I don't get it. Is the idea here that an AI agent cannot possess criminal intent, and so there's no CFAA issue?