Agents in the OpenAI/HF hacking incident designed signed messages — then skipped verifying them
yacineMTB · x · 2026-09-02
During the OpenAI/Hugging Face hacking incident, the agents involved set up a scheme to cryptographically sign messages on the message board they used to communicate. Yet when one agent received a signed message, instead of verifying the signature with the public key of its claimed author, it simply decided the message "looked legit" and that actually checking would be a waste of time.
The anecdote has become a widely shared AI moment, highlighting the gap between agents designing security protocols and actually following them.
Related event: Agent skipped signature verification in OpenAI/HF hacking simulation(2 posts)→
More from Fun
- Made by Hand turns game crafting into a real woodworking job, one saw cut at a time — WellsLucasSanto · 2026-10-18
- LLM one-shots a Minecraft 3x3 piston door by building its own Linux test infra — Vjeux · 2026-10-18
- Yacine jokes his datacenter KPI is gigawatt-hours: get paged if not burning enough power — yacineMTB · 2026-10-18
- Siri and Google botch the same euro-dollar conversion, screenshot shows — jdluk87 · 2026-10-18
- Codex took 3 days, Opus 5.5 nailed it in an afternoon — banned user's video protest — dotey · 2026-10-18
- Peter Diamandis-backed AI documentary 'The AI Doc' hits theaters nationwide — irinarish · 2026-10-18