← Back to context

Comment by subroutine

13 hours ago

> you need to expect appropriate legals consequences for this sort of negligence

I might have missed it, but did the agents do something illegal? Or do you think that what the agents did should be considered illegal?

The HuggingFace attack was definitely illegal and should be prosecuted under CFA

I dunno about this article, but it seemed to me that the now-famous huggingface attack very likely broke some laws...

  • wouldn't it be interesting if nVidia buying hugging face was part of hushing up the fallout there

    On the face of it, they would have very good cause for some action there, assuming they wanted to.

If they didn't conform to the T&Cs of the site (they almost certainly didn't), then they have violated the criminal law in some jurisdictions (e.g. Illinois criminalizes violations of T&Cs).

Per the linked article, "A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents"

  • If the wiki was configured to allow anyone to edit, they may have broken ToS at the very worst. Nothing illegal happened.

    That's very different than popping an artifactory server with a 0day.

  • which law does editing a wiki break? i am not familiar with german law.

    • German law for malicious computer use is fairly loosely defined, and massively favours the harmed party over the one causing harm.

      I don’t think it’d be a slam-dunk by any means, but a reasonably competent legal team should be able to establish a case around malicious data interference at the least. There’s certainly enough merit to the idea that OpenAI would be better off settling it as a civil matter early.

    • This kind of incredulity in the AI era hilariously reminds me of the naivete of the late 90s. All of us edgy teenagers would be like "an MP3 is like just a long number, man! You can't own numbers!" Of course we were morons. In just the same way as the "oh they were just editing a wiki" defense is moronic.

      The law isn't code. Human intent matters. Also when the really big number is a copyrighted song. Also when AI agents are set in motion to edit wikis or break in to websites.

      3 replies →