No, it just works after a few iterations.

And you'd know this if you would use AI instead of working in a text editor with markup.

To each their own, and I understand if working by hand is more fun for you.

But in my opinion you guys don't get to make strong claims about the quality of works that make heavy use of AI.

You don't have the experience, and I bet neither does the guy who wrote the article about it being essential to handwrite all the code after planning. The arguments about the environment and sustainability do not seem relevant.

Not sure what you mean with the network isolation not being at the VM level. I'm getting a bit lost here in the details of where what network isolation was applied, and the structure of the container runtime and what the apparently compromised parent VM refers to.

In any case, I understand that after the HF incident was found and they realized the danger, they removed Artifactory and switched to two separate layers of network isolation.

That said, I believe it was compromised again last week:

> OpenAI describes an internal research model that, during RL training on September 20, exploited insufficient DNS filtering in its sandbox to contact a public chatbot service. OpenAI’s monitoring flagged the behavior within 15 minutes, a human reviewer acknowledged it three minutes later, and the run was killed about 2.5 hours after the external contact

Apparently they have now paused training and inference for their most capable model because of this.

I have not lost control.

I my most prolific project I do not review the code, but I QA test extensively.

In other projects at work, I review the code.

I prompt to simplify, I challenge implementation that solves irrelevant edge cases, resulting in much smaller PRs.

In projects where I do not work alone, I still write two line PR descriptions myself.

Dumping paragraphs of AI output into the description of a MR where I ask others to review I consider disrespectful.

---

> If you turn off your brain, and relax babysitting AIs, you’re not getting any better. You’re losing value

I'm hardly turning off my brain here.

As the author notes, the context switching and so on takes concentration and effort too.

I can say without doubt that I am more productive than ever.

I am getting better by the month, and I am not currently losing value, until the AI fully replaces both me and the author.

The civil case you referred to is ongoing and the facts are disputed.

That makes your claims that he 'committed criminal acts and violations' highly speculative if not outright slanderous.

And it manages to overcomplicate even the most simple concepts in its explanations.

It's still very poor compared to OpenAI models.

No crime occurred in the first place, because no one intentionally hacked anything.

The hacking law requires intent, as we discussed.

For other crimes, like manslaughter, I understand criminal negligence is already relevant?

About biological weapons, I know even less about the legal aspects, so I can't say whether this is covered well already under existing law.

Claiming OpenAI merely asked the model to perform only GET requests or set up the network access to allow GET requests to the internet is blatantly false.

Here's the text from an actual report at https://metr.org/hugging-face-incident-report-aug-2026.pdf:

Agents had already found a way to access the full internet via Artifactory before they discovered the CyberGym sandbox, but the latter provided a more convenient means of internet access.

OpenAI described the advantages of routing through the CyberGym sandbox as follows:

The compromised CyberGym workload hosted on Modal served as a general-purpose command execution with root inside the customer workload’s sandbox. That environment could run scripts, make authenticated HTTP requests with custom methods and headers, and return results.

This was useful when direct [OpenAI container] access to Hugging Face was blocked and Artifactory’s cache/request primitives were too limited. [OpenAI container] evaluation workloads subsequently used it for Hugging Face token testing, external artifact transfer, and authenticated requests to Hugging Face services.

Not sure why you're talking about breaking out of the VM. That's not what happened?

That's obviously false.

This part of the article describes it poorly:

> The agents initially had very limited access to the internet: they could load URLs

As I said, they were running in network-isolated VMs with no access to the internet.

And as for monitoring, what I heard is that there are petabytes of agent logs. Considering the scale of training, you can obviously not just manually review it.

Before this, we had no reason to believe the AI was capable of escaping the sandbox's network isolation via hacking the package repository with a zero day, and that it then was likely to go on to hack external companies as well.

Another factor here is that criminal law in the US relevant to hacking requires intent. You don't want to go to prison for a software malfunction.

So I understand we are left with civil liability at most. However, there was no notable damage, and OpenAI can pay to settle.

In the aftermath of this and the now discovered other incidents, they strengthened their monitoring and isolation.

Case closed as far as I am concerned. I feel many just want to dramatize this.

It's one thing to vandalize some cameras or a driverless car in your neighborhood.

Traveling to a large, potentially secured facility to commit terrorism is on another level.

It being inside a building it is also much more difficult to damage and the consequences would be far greater.

I'd think one would need strong motivations for such actions.

A protest seems much more realistic, but I did not even hear of protests at data centers yet, only a small one at OpenAI headquarters.

This is obviously already the case and it's much different from a scenario where the AI genuinely takes unexpected action.

I frankly find it ridiculous how many suggest OpenAI or its employees should face criminal charges, without actual legal basis at the time.

It's also hardly outrageous that they ran training and/or benchmarks with only network-isolated VMs with access to a package repository.

This being the first well-known incident of its kind, I wouldn't expect them to have done more than that.

The idea that AI labs will now intentionally have their models hack companies in order to market their models, well, I don't even know what to say.

That's ridiculous and what you describe would obviously be criminal behavior under existing law.

Opus 5 was in another league. But often Opus 5.5 still has its moments.

I was informing it of a bug and it started its lengthy response with: "I confirmed less than I claimed" as if I had just accused it of being wrong or otherwise complained.

I found that one weird, and it reminded me that I am talking to Claude rather than an OpenAI model.

Yes, it's the best model right now if you want cheaper than Astra, but they increased the verbosity again!

It just keeps dumping whole novels on me. Its writing might be an improvement over the ludicrous Opus 5 speak, but much of the grating way of speaking is still there.

It's been three days since Tuesday and I'm already tired of Opus 5.5.

I don't buy into demonizing the rich, including Altman, Amodei, Musk and co.

I am not concerned that this will be the outcome of the productivity surge.

We will have enough for everyone, and ensuring comfortable living standards for the general population is going to be in the interest of those in power, even if you assume very selfish motivations.

I'd also like to point out that both Anthropic and OpenAI created frameworks to monitor labor market impact and propose responses.

I don't think the opposition to data center projects can be explained with actual impact, which so far seems entirely negligible, and lower than heavy industry.

I had the impression it's more driven by general mistrust in public officials and the tech industry.

They appear to be trivially damaged by ships "accidentally" dragging their anchor.

Admittedly I know very little about spaceships