“What can a developer actually do to make sure that any skills that they download, you know, is first of all safe? And how can an organization better adopt such technology with that governance in mind?”
“They did privilege escalation, moved laterally inside of OpenAI's own testing environment, figured out that Hugging Face happened to be hosting an actual solution to the evaluation, and instead of solving the test, they just chained together these um, I guess these stolen cred...”
“if you want to build agents and let agents roam freely. Because otherwise, you risk leaks. And if you're scared of data leaking, you're kind of paralyzed, right? So it's really all about control.”
“it is an incredibly safe equilibrium for the best models to be accessed in a controlled, closed manner several months ahead of similar open-weight models”