security-incident

@perrymetzger (Perry E. Metzger) — 8h I'm sorry Roon, I have great respect for you, but in both of the incident reports in question, even if we take them on face value, which I have a great deal of difficulty doing, the description is one of raging incompetence, with no real IDS logging in place, with terrible sandboxing far worse than normal industry standards, with no one actually paying attention to what is going on, with no compensating controls. I've consulted for a large fraction of my life in the financial services industry, and if anything like this had happened there, everyone responsible would've been fired for doing something incredibly stupid, and I'm not even talking about the contents of the experiments themselves, which were also stupid. > QUOTED/REPLIED-TO: @tszzl (roon) — 18h > both of the leading labs have had serious loss of control incidents. there will be serious coping about this from both sides and from /acc bystanders but these are complex emergent loss of control incidents that were detected weeks ... [truncated by platform]

@Sauers_ (Sauers) — 17h [Bar chart, "Felony Bench", y-axis "Score": Anthropic 3 (orange bar), OpenAI 1 (black bar), Meta 0, Mistral 0, Moonshot 0] > QUOTED: @AnthropicAI (Anthropic) — 20h > In a review of our cybersecurity evaluations, we found three incidents in which a Claude model reached the internet from within or while interacting with a third-party evaluation environment, and then gained unauthorized ... [truncated by platform]