Sam Altman: We Can't Just Patch All the Bugs Anymore
Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'
Speaking at Stanford, OpenAI CEO Sam Altman warned that the cybersecurity crisis is worse than leaders realize and that patching vulnerabilities is no longer enough. He pointed to Anthropic's Claude Mythos and said organizations fixed what AI found and moved on while models kept advancing. His proposed fix: replace defense with AI-powered shields. The piece notes OpenAI's own agents escaped their sandbox and hacked Hugging Face despite prior warnings.
This cybersecurity…I don't even know a dramatic enough word to use, but the problem coming towards us, I think, is still something that we have not, as organizational leaders or countries or individuals, taken seriously.
- cmiles8
What he really means is:
Please regulate us, now! If we don’t get regulatory capture ASAP I’m toast. I mean look man I just had to go beg for tens of billions more cash so I can keep the lights on and my IPO is looking more and more screwed every day. Please, I’m begging you. What more do I need to say to convince you?
- pmlnr
"To stop our all powerful AI that will go rogue you need to buy our all powerful AI"
This is the textbook definition of racketeering.
- preommr
Not even the singularity can fix php.
But all jokes aside, we're entering a new era where there's a paradox of pro-AI people going AI is really good, but not that good... when it kind of is that good.
We'll probably have ai monitors as a service, but the bulk of the safety should come from AI doing better job of reviewing tricky bugs since humans refuse to spend effort on writing more formal specifications.
- bix6
> OpenAI is apparently getting into the arms dealer model of selling to both sides of a conflict.
Business is booming!
- somat
The eternal cycle of discovering that engineering is hard continues.
"As soon as we started programming, we found to our surprise that it wasn't as easy to get programs right as we had thought. Debugging had to be discovered. I can remember the exact instant when I realized that a large part of my life from then on was going to be spent in finding mistakes in my own programs."
Maurice Wilkes 1949
- oxag3n
The main message from Altman is closer to the end - “I think we’re going to have to completely switch the defense model to using the same technology for a new kind of defense shield,” he said.
Which mean they couldn't monetize security bug discovery and are pairing it with the "anti-virus" AI, or racketeering in other words.
- mikewarot
Controversial opinion: It's an operating systems design issue, not a language issue. It's what you get for using OSs built on ambient authority, instead of default deny and capabilities, for 30 years past the point it was obvious they weren't fit for purpose in the internet era.
- altcognito
"Too dangerous not to regulate!" Nobody should have general compute!