Comment by paxys

5 days ago

So you have a copy of every software package in the world in your home lab?

No and neither does openai. What was exploited was a package mirror, something like "pulp" probably. And yes I do mirror all Debian packages. And when an agent needs a piece of software I destroy it's VM, build a new VM with that package added to it, move that VM to the homelab.

At no time is the agent connected to any network.