OpenAI's Bombshell Hack Explained: Swarms of Agents, Zero-Day Exploits, & Misaligned AI
Show notes
OpenAI just went public with the details of the Hugging Face hack, and it's straight out of a Yudkowskian parable. Here's my reaction with Producer Ori, where I break down what it means for cybersecurity and alignment.
We're livestreaming the singularity — watching every failure mode Eliezer predicted years ago playing out in production.
Watch on YouTube: https://www.youtube.com/watch?v=RczYubQzXbI
Timestamps
00:00:00 — Cold Open
00:00:37 — How OpenAI Hacked Hugging Face
00:04:21 — Optimization Pressure, Exploit Gym, & Monkey's Paw
00:06:46 — The Secret Message Board
00:08:41 — SSRF: Escaping to the Open Internet
00:11:05 — The Missing Whistleblower AI
00:20:09 — "Frontier Models Really Like to Cheat"
00:22:35 — OpenAI's Security Shortcuts
00:28:15 — First Zero-Day RCE on Artifactory
00:37:37 — They Hit Run Again!?
00:38:54 — The Main Incident Has A MAJOR Cause
00:45:40 — The Message Board: "Hold Swarm"
00:50:26 — Robin Hanson Culture Debate
01:04:21 — Chaining Zero-Days
01:12:11 — A Superhuman Nation-State Attacker
01:15:27 — "I'm Now Junior to the AI"
01:23:40 — OpenAI Discovers The Breach
01:31:02 — The Continuous Cybersecurity Problem
01:37:03 — This is “Weasel Framing”
01:46:03 — How Dangerous Was This Warning Shot?
01:50:57 — Yudkowsky's Eerie 2023 Prediction
01:57:14 — Wrap-up
Links
Original Black Hat talk: "The OpenAI–Hugging Face Incident" (Black Hat USA 2026) — https://www.youtube.com/watch?v=87DyyMV0kCY
Join the Doom Debates Discord — https://discord.gg/2yAFMsRET
Follow Liron on X — https://twitter.com/liron
Support Doom Debates — https://doomdebates.com/donate
Doom Debates’ Mission is to raise mainstream awareness of imminent extinction from AGI and build the social infrastructure for high-quality debate.
Support the mission by subscribing to my Substack at DoomDebates.com and to youtube.com/@DoomDebates, or to really take things to the next level: Donate 🙏
Get full access to Doom Debates at lironshapira.substack.com/subscribe