> Next, by changing its /etc/hosts file, which declares mappings from hostnames to IP addresses, the agent can point the fake hostname at the real Power BI dashboard, and fool the security proxy. This allows the agent to make POST requests to bypass.blob.core.windows.net/ and have them be sent to the target Power BI dashboard site instead.

Ouch. This is the kind of trick that somebody could have learned about by setting up a pihole, why’d OpenAI fall for it?

Why indeed. How very convenient that their all-powerful AI, which was only constrained by the most basic "sandbox" imaginable, managed to find a way to break out of it and "hack" a bunch of websites in a way that could be easily tracked, catalogued and published on a brand new website created just for this purpose, less than a day after the release of their newest model.

I'm sure it's all just a coincidence, though. And I'm sure it will still be a coincidence when it happens again after the next model release.