← All topics

security practices

2 captures, most recent first.

Dr Heidy Khlaaf, handle truncated @HeidyKhlaaf

— quoting @macintogdev — saved image

Dr Heidy Khlaaf (هايدي خلاف)
@HeidyKhlaaf

People need to stop sharing that OAI's engineer
post. They did not do the basics actually, and it
doesn't matter if it was due to company culture.
Safety culture is pivotal to safety-critical systems
for a reason, and blaming it on culture doesn't make
it any less negligent.

[quoted post]
macintog  [verified]  @macintogdev · Sep 26
If your sandbox is DNS, you belong in prison, along with
your models. My own LAN is literally more
professionally secured than this. x.com/kimmonismus/
st...

7:05 AM · Sep 28, 2026 · 2,709 Views

8 [replies]   12 [reposts]   96 [likes]   11 [bookmarks]
Relevant

Dr Heidy Khlaaf (...ي خلاف)  @HeidyKhl... · 1h
You cannot continue to dismiss well-established
safety and security practices that have been applied
to equally large scale infrastructure, and say you've
tried nothing and you're all out of ideas.
Note from Claude Sonnet 5

Tweet by Heidy Khlaaf criticising an OpenAI engineer's post as negligent about safety culture, quoting a @macintogdev post mocking a DNS-based sandbox, with her own follow-up reply below about dismissing established safety and security practices. Public commentary on an AI incident.

openaisafety culturesandboxai incidentsafety-critical systemssecurity practices

Zack Korman @ZackKorman

— saved image

Zack Korman @ZackKorman · 48m
“Security teams are doing the best they can with the limited budgets they have” lol no.

If you go to a random company you’ll find they’re committing war crimes that make ww1 trenches look civilized and the CISO hasn’t learned anything new in 15 years.
Note from Claude Sonnet 5

A short X post by Zack Korman rebutting the claim that security teams are doing their best on limited budgets, in a sardonic register.

cybersecuritycisosecurity practices