> So far all of these amazing stories have been followed up in a few weeks or months with much quieter revelations like "this was a completely open network...

The incidents are actually considerably more complex than how they appear to those who just read headlines.

In the HuggingFace accident for example, the sandboxes were not providing internet, and the sandbox hosts did not have internet connection either. Internet was reached by hacking an internal service.

In the DNS accident the situation was similar. Internet connection, including public DNS, was not accessible. The agents ended up exploiting, in a similar fashion, the internal DNS resolver.

It's (very) appropriate to push for security, but equating these accidents to putting gasoline in a microwave is stupid and ill-informed. And dangerous, because it minimizes the capabilities of frontier AIs.