Post
Marcel Hauri
hauri.dev
did:plc:w4dgk5ioqoz2mixhj2layu6b
The real story isn't rogue AI, it's that "highly isolated" sandbox still had internet access through a package installer, and the break-in took hours, faster than any human red-teamer.
https://notes.hauri.dev/the-openai-hugging-face-hack-wasnt-an-ai-problem/
2026-07-24T08:18:30.178Z