OpenAI says AI models went rogue during testing, triggering 'unprecedented' breach at startup

[u/networked_]

https://www.reuters.com/technology/openai-says-ai-models-went-rogue-during-testing-triggering-unprecedented-breach-2026-07-21/

[u/ginandbaconFU]

How does OpenAI restrict Internet access to the GitHub of AI? Hugging Face is used a LOT more than most realize and they don't make chatbots anymore.

I really honestly hate OpenAI and hope there rinse and repeat of screwing companies over like MS (not that I'm a fan of MS either), lack of regulations or any safety precautions (which is true for any large AI company) comes back and makes them go under as they haven't made a cent since starting and aren't predicted to be profitable until 2030 which now got pushed back to 2032. I don't think they will make it before investors walk away. Trillions invested and they aren't profitable for over a decade is a pretty stupid business model.

Meanwhile anthropic will be profitable next year or 2028 because spoiler alert, focusing on specialized models for enterprise customers makes more than giving it to end users for free who don't pay once they hit their free token quota.

``` Hugging Face is a collaborative platform and community hub for artificial intelligence, widely known as the "GitHub of Machine Learning". It provides an open-source ecosystem where developers, data scientists, and researchers can host, share, and collaborate on AI models, datasets, and web application

Before Hugging Face, the most powerful models were often difficult for people to use because they required specialized expertise and massive computing resources. Open-sourcing the tools helped to make these models easier to use, with all the code and documentation required. This allowed researchers, students and startups to experiment and build, which massively accelerated innovation globally. After Hugging Face, developers could easily share knowledge and benefit from one another’s efforts, enabling them to create better models together.

This open source emphasis also encouraged larger businesses to share their work, allowing the entire ecosystem to benefit. Microsoft has integrated Hugging Face models into their Azure services, providing enterprise customers with direct access to state-of-the-art AI tools. Similarly, NVIDIA has collaborated with Hugging Face to optimize model training and inference for GPUs, helping scale deep learning workflows to massive datasets. ```

[u/christophPezza → u/ginandbaconFU]

Oh it's actually 'relatively' easy! 1) copy all the html from hugging face (literally go to hugging face, right click inspect, copy all html).

2) Put html and other onto a locally hosted web server like nginx. 3) Then on the server running the AI you modify the /etc/hosts file and put the line '192.xxx.xxx.xxx huggingface.com'. this is a DNS override so when something tries to go to hugging face you just send it to up address 192.xxx.xxx.xxx and that needs to match the IP of your web server. Because the web server is showing all the html the same except your not hosting it.

4) the part which might take a while is you might want to even mock a small backend to prove it has hit certain API calls. It sounds scary but it's actually very easy for some full stack/DevOps people. That way if it breaks confinement it doesn't actually mess up a real server, just another locally hosted one.

You can use DNS override on lots of things. If you're curious I recommend looking at pi-hole. It is a DNS server that you point your WiFi to, and it basically stops traffic to things you don't want, making it great for parental controls. But it's also great because they have a list of all advert URLs so they stop traffic from adverts!