[rvz]

So a near trillion-dollar company doesn't have the basics of continuous security monitoring and threat-detection systems to catch and report this incident as soon as it is detected?

It doesn't help them to report serious incidents like this and it should be as soon as possible. This reactive investigation makes as if they ignored and sat on this issue, until a similar story from another lab made headlines first.

Would we have known about this issue if the OpenAI / Huggingface incident never happened?

[simonw]

> So a near trillion-dollar company doesn't have the basics of continuous security monitoring and threat-detection systems to catch and report this incident as soon as it is detected?

Turns out two separate trillion-dollar companies failed that test.

> Would we have known about this issue if the OpenAI / Huggingface incident never happened?

It's not clear if Anthropic would have spotted this if that incident hadn't inspired them to review their own logs more closely.

[customguy]

> Turns out two separate trillion-dollar companies failed that test.

How did that "turn out"? For all we know they're all lying.

[solenoid0937]

Hoo boy, if you think this is all a conspiracy and misconfigurations like this are not exceedingly common at big tech companies, I have a bridge to sell you.

[customguy]

It didn't say it's impossible, but saying "it turned out" implies a revelation that does not exist. If you think you'll have more success shooing me with the c-word rather than just parsing English and leaving it at that, I have two bridges to sell you, at the price of just one bridge!