Only open-weight self-hosted models helped during breaches, Hugging Face and OpenCode found

ccerrato147 · x · 2026-10-23

Continuing the 'Black October' thread: when Hugging Face was breached in July, frontier models' safety filters refused to help analyze the attack. OpenCode got the same refusal mid-breach this month, and only received help after OpenAI admitted it to a vetted defender program. The only help on the spot came from open-weight, self-hosted models. The author's conclusion: a guard that won't fight at night is not a guard — a hosted model answers to its maker, one in your own keep answers to you.

Related event: OpenAI's Security Refusals Fuel Push for Open-Source Models(2 posts)→

Original post →

More from Models

Models channel →