Comment by simonw
4 hours ago
> Our understanding from talking to people in the RubyGems community is that OpenAI never informed them that they were responsible for this attack.
I really hope that's not the case, because if it is there are two options, both of them bad:
1. After the Hugging Face and Wiki attacks OpenAI were still unable to review their previous logs and determine that they had previously attacked RubyGems.
2. They knew about the attack on RubyGems and made the decision not to reach out to the RubyGems team about it.
In either case, more of these coming out continues to make their announcement of a two week pause for hardening somewhat laughable. If they couldn’t either identify or communicate within 2 weeks about yet another incident, why should anyone believe 2 weeks is sufficient to harden all their infrastructure and add proper monitoring and everything?
3. They're just doing this shit on purpose.