> OpenAI’s mission is to ensure that artificial general intelligence (AGI)—by which we mean highly autonomous systems that outperform humans at most economically valuable work
> The two companies reportedly signed an agreement last year stating OpenAI has only achieved AGI when it develops AI systems that can generate at least $100 billion in profits.
That was necessary because of the deal they had from a while ago where Microsoft would lose access to OpenAI's technology once OpenAI achieved AGI.
Apparently they renegotiated that away in April 2026: https://openai.com/index/next-phase-of-microsoft-partnership...
> Revenue share payments from OpenAI to Microsoft continue through 2030, independent of OpenAI’s technology progress, at the same percentage but subject to a total cap.
And accessing memory in a specific sequence can generate radio signals that can be picked up by a mobile phone at a distance: https://arxiv.org/html/2409.02292v1
reducePrivs()
serve get(package) {
secPackage = secure(package)
getBinaryFromArtifactory(secPackage)
}
And even if the agent tries to hack that, the attack surface is 1000x smaller and the possibility also much smaller.
But I'm not a security researcher, would love to see your hack to learn something (because that is what I do to sandbox agents that need services).
Part of the problem might be the lack of security focus, as these are AI R&D efforts first.
Similar thing happened with the UK AISI - they got caught out because the environments they had used for previous generation models turned out to be completely inadequate for the new generation of Fable-class models: https://www.aisi.gov.uk/blog/incident-report-unsanctioned-ag...
This was part of evaluating cyber security of their frontier models and they had a "sandbox" which, and I'm not a security researcher, looks not adequate from the first look.
The entire package manager repository could just be in an offline cache. They don't need Internet to give their agents access to tons of software.
I think that was the requirement, but yes, the cache could have been offline.
Still then they could have hacked it to create the message boards - but not use it to access the internet.
[Edit: eh, a bit of both. They were doing RL on a hacking exercise. It hacked the harness which was plugged into the phone line. Same question.]