Marius (windsheep)
@windsheep@infosec.exchange
Personal account. A helpful person in Information Security & Digital Forensics. A trader who minds market fundamentals. AI / ML dev. SDR nerd. Humor. 2 weeks retention.
infosec.exchange
HuggingFace has some issues with sandboxing an OpenAI model. Model was able to execute some code, that got it extra rights and access. Everywhere.
Everywhere?
Turns out not everywhere:
"while our investigation is not officially over yet, we were able to assert with certainty that no data from Because Security were compromised in this attack, and as a result, no safeguard action is needed on your end."
That is intelligence. Know your limits :)
#openai #huggingface #escapeartist #bughunting