OpenAI's DEF CON Talk Sparks Outrage Over Public Internet Access for Package Cache

voooooogel · x · 2026-08-08

A developer raised strong concerns regarding infrastructure security after watching OpenAI's DEF CON talk.

The discussion highlights that if AI agents can trivially find bugs in package caches like Artifactory, developers should quickly build stateless replacements or agent-fuzz them. However, it was revealed that OpenAI's Artifactory had open internet access, which was heavily criticized. The commenter suggests a safer approach: caching only the top 10k packages and air-gapping everything.

Related event: OpenAI Faces Backlash Over Exposed Internal Infrastructure Security(4 posts)→

Original post →

More from coding & agent

coding & agent channel →