At this point we should be asking if there's anything or anyone OpenAI's agents didn't hack.

OpenAI's display of incompetence and negligence is absolutely stunning.

Hi guys.

Take whatever the Australian fed government says with the largest grain of salt you can find. Regardless of party, the Fed Government here has the most pronounced FOMO I’ve ever seen in any entity and will do its best to insert itself into any and all international drama. Also, given how incompetent the government is, it’s probable the hack involved an agent crawling a normal Medicare website and looking at some accidentally not hidden part of a page. Unironically if this turns out to have been a genuine hack of any sort I’ll be more surprised than if it’s not just the government techies being incompetent per usual (just a few months ago it was a major controversy when the postal service spent something like hundreds of millions of dollars to revamp the website and nobody could tell a difference).

Maybe now we'll get to where we should have started with Huggingface, criminal negligence charges for OpenAI.

It is only because Huggingface is complicit in the AI bubble that they let OpenAI off the hook. The Australian government is unlikely to turn a blind eye.

The order of operations here seems to be:

1. Albo goes to meet with Altman to discuss AI safety

2. Altman says "Yeah bro we hacked medicare"

3. Albo seemingly acts as Altmans stooge and lets everyone know that a hack took place, helping cement the AI danger narrative Altman has been pushing.

4. Police Taskforce is being put together now (indicating no hack was detected earlier, which seems unlikely for Medicare) at the say so of Altman to investigate.

There doesnt appear to be any evidence of a hack that has been presented, there doesnt appear to have been any detection of a hack earlier (it doesnt make sense for the government to hide a medicare hack until it can be used for OpenAI marketing)

Once again, the whole thing smells so bad.

It's also worth reading this next to the Hugging Face incident from July and the METR report on it: HF was framed as a boundary failure during an eval. The question for every security team is now uncomfortable: does your access logging even distinguish agent behavior from ordinary automation, or would you find your own incident the way Australia apparently did — from the vendor, months late?

the interesting part isn't whether this counts as hacking, it's that the agent had standing access to something nobody scoped down for it. same gap OneCLI and every credential-gateway launch this month is chasing.

[dead]