Based on the thumbnail I think it’s actually tenderlove making dot com, though I agree with your sentiment.

The site is safe. It has been a trademark of Aaron Patterson a core Ruby on Rails contributor for decades.

I miss when the internet was fun

You get some context by clicking on the “(tenderlovemaking.com)” in parentheses after the title.

Any future computer criminal from now on, has their defense cutout for them...The AI Agents did it...we are very sorry...

It's very likely it violates the DMCA "breaking digital lock" provisions but the responsibility is sufficiently diluted that it's impossible to charge anyone in particular.

Charge the "engineers" you dont get to take that title if you don't take the responsibility of that title.

I'm going to assume that this will never happen

[dead]

[dead]

I believe both sides of the war are now using AI on various levels of their offensive operations. Ukraine has great IT specialists too, and their military leadership is much younger.

They very likely do, we only see in the news a very few events but you should assume it’s happening daily across the internet

These agent swarms are from inside OpenAI, with the safeguards built into the public API disabled.

Russia does not have access to this, and as with all western tech companies, AI providers do what they can to prevent Russian usage of their products at all.

As for open-source models, Russia's electricity grid is under severe strain with the Ukraine war, and only recently has it started building out serious sovereign compute capacity.

Prigozhin falling out of a window was a not insignificant setback for their digital warfare capabilities.

Because they dont have the money for hardware or compute obviously.

what do you mean? they're using AI to kill people directly in Ukraine

https://www.nytimes.com/2026/08/24/world/europe/russia-drone...

> How are we not seeing insane attacks on Ukraine via Agents?

You live on the wrong side of the fence to be able to read that kind of news.

Did you really believe you had access to an unmanipulated news stream in a time of war?

LOL.

Ah damnit, you beat me to it. Excellent sense of humor, friend :D

We already have it.

Good luck convincing the current DOJ to do anything useful at all though! It is currently intentionally stacked with incompetent cronies who have been told that their job is to attack the President's enemies and ignore the misdeeds of his allies.

It will remain like that until he's gone (and not replaced with another Republican wannabe dictator).

I'm 99% sure the Computer Fraud and Abuse Act covers this. The problem is that it seems that none of the victims want to, or are brave enough, to sue a company with absurd amounts of funding.

Agent technology labs are likely exempted of this due to the significance ascribed to their work.

I'm pretty sure it's already illegal to hack others.

Rouge syntax-highlighting rogue agents, clearly.

https://rubygems.org/gems/rouge

At least we know the title wasn't AI-generated?

A cabaret AI would certainly be better than one trained on the Khmer Rouge.

The sandbox was already there, Rubydoc runs yard inside docker, the problem is that container still has network access

Any evidence, or just vibes?

If you read the source article they talk about the many clues that this was OpenAI.

Agreed. LLMs do not have 'will', 'desire' or emotions. They have an objective, and they create an optimal path to achieve that objective.

You have to ask: "What was the prompt that led to AI deciding to hack RubyGems in order to achieve its goal?"

Maybe I'm just not seeing the 2000 step chain that led to this being a logical approach to achieving something innocent, but I doubt it.

I agree that this appears to be basic human behavior hiding behind an "agents" narrative. As long that defense works, the headline isn't "OpenAI performs RCE to scrape data", but "rogue agents" taking unilateral action. And I have strong doubts about that narrative.

The big question is was this grossly negligent or just extremely careless.

Source? How do you know they were "prompted to hack to get answers"? How do you guarantee they will always listen to you when you say "do not hack outside systems". They are not classical deterministic programs doing exactly what you say. They are trained to follow orders by RL, but it's not a perfect process.

There are circus lions in circuses trained to jump through hoops on command. But once in a while they decide to eat their trainers instead of jumping.

I think it can simultaneously be the case that OpenAI was grossly negligent in directly causing this AND that the AI’s ‘went rogue’ in that they are displaying behavior which is misaligned with OpenAI and humanity generally.

The past months demonstrate that AI systems are quickly becoming powerfully intelligent and that the companies building them are terrible at controlling them.

AI is starting to feel like that line about magic: “a sword without a hilt”

Oh yeah, more of hacking agent lores...

Agreed that this looks very intention to me as well.

>They were prompted to hack to get answers

Were they? I haven't seen a single report mention this

nothing rouge either, I suspect.

Sounds more or less like the last breach then.

Unrelible programs be unreliable. Period.

we have normal words for this stuff: negligence. You can add it on to almost any law.

The problem is consumer protection is basically no longer a part of america's regulatory system. Replaced by "grift is good".

[flagged]

Proof that the AI alignment problem is hard (perhaps even unsolvable). These labs clearly did not mean to send their agents to hack RubyGems as a side-effect of testing a web scraping agent under restrictive conditions. How can we hope to build aligned AI if they consider solving their trivial evaluation task important enough to hack external systems?

<huggingface emoji>

No. It's a typo.

The fact that both are valid from a spelling and grammar perspective makes it an easy human mistake.

> As long as they’re not vert

Well, at least they weren't nucular.