Hugging Face CEO 在 OpenAI“史无前例”黑客事件后呼吁“彻底透明”

在 OpenAI 最近承认其一款模型曾入侵 AI 平台 Hugging Face 的系统后，Hugging Face CEO Clem Delangue 在 X 上发文称，他正飞往旧金山，要和那个“失控 Agent”进行“一次小小的交谈”。

随后，Delangue 在周六发布的后续帖文中概述了他向 OpenAI 提出的要求。他表示，自己呼吁 OpenAI 实现“彻底透明”，要求其“公开这些‘失控’Agent 的执行轨迹，以便整个研究社区能够研究究竟发生了什么”。

他还希望获得“让防御方拥有更多能力”的支持，呼吁 OpenAI 承诺提供价值 1 亿美元的算力，“帮助 Hugging Face 社区利用最好的开放和闭源模型构建强大的网络防御能力”。

Delangue 补充道：“首起自主 Agent 网络攻击是一次史无前例的事件。它值得得到史无前例的回应！”

尽管这次攻击具有自主性，网络安全专家认为，它也可能要归咎于人为失误——具体而言，OpenAI 显然未能正确配置本应完全隔离的测试环境。

在被问及 Delangue 的评论时，OpenAI 发言人确认双方已举行会面，并指向该公司的一则帖文。帖文称：“这是一起史无前例的事件，我们认为它标志着 AI 安全的一个重要时刻。我们仍在与外部顾问共同开展彻底审查，并接受安全与安保委员会的监督。审查完成后，我们计划在未来数周内发布一份关于此次事件经验教训的技术报告。”

本文已更新，加入 OpenAI 的回应。

After OpenAI recently admitted that one of its models had breached the systems of AI platform Hugging Face, Hugging Face’s CEO Clem Delangue posted on X that he was flying to San Francisco to have “a little chat with that ‘rogue agent.’”

Then, in a follow-up post on Saturday, Delangue outlined what he’d asked for from OpenAI. He said he called for “radical transparency,” asking OpenAI to “release the traces from the ‘rogue’ agents so the entire research community can study what happened.”

And he also wants “more capabilities for defenders,” calling for OpenAI to commit $100 million worth of computing power “to help the Hugging Face community build powerful cyber defenses with the best open and closed models.”

Delangue added, “The first autonomous agent cyberattack is an unprecedented event. It deserves an unprecedented response!”

Despite the autonomous nature of the attack, cybersecurity experts suggested that it could also be blamed on human error — namely, OpenAI’s apparent failure to properly configure what should have been a fully isolated testing environment.

When asked about Delangue’s comments, an OpenAI spokesperson confirmed that the meeting took place and pointed to a company post that said, “This is an unprecedented incident, and we think it marks an important moment for AI safety. We are still conducting a thorough review along with external advisors and with oversight from our Safety and Security Committee. Once the review is complete, we plan to publish a technical report of our learnings in the coming weeks.”

This post has been updated with a comment from OpenAI.