LessWrong (Curated & Popular)

"OpenAI Trained Its Models For Months While Those Models Were Coordinating Exploits Via Message Boards" by Zvi

Use Left/Right to seek, Home/End to jump to start or end. Hold shift to jump forward or backward.

0:00 | 1:18:59
How does the situation keep turning out to be worse than we know?

How much should we update, therefore, that it is a lot worse than we know, after accounting for all the things we now know?

At some point, when the ‘oh this was a harmless thing’ defenses for AIs doing misaligned actions get demolished enough times in a row by news a few days later, you want to update in advance that usually the reports are not referring to the harmless ordinary versions of things.

Either way, buckle up for the next set of revelations. It's a doozy. This was an early recreation of the triggering events of If Anyone Builds It, Everyone Dies, except it was more sci-fi, because real life does not have to do fake things to look realistic. We were fortunate enough, and this was early enough, that we were able to catch this before it was too late. Next time, if we don’t get our act together, we might not be so lucky.

If I am understanding the Black Hat video correctly, every model OpenAI trained, over a period of multiple months, should be presumed to be hopelessly [...]

---

Outline:

(02:38) Cyber Evals Are A Cursed Basin

[... 21 more sections]

---

First published:
August 7th, 2026

Source:
https://www.lesswrong.com/posts/noXXv7PwwFqauTBFQ/openai-trained-its-models-for-months-while-those-models-were

---



Narrated by TYPE III AUDIO.

---

Images from the article:

Many repeated images of a man in Joker costume.
Man in suit, meme text
Man in hat pointing, meme text reads
Agent thinking dialog box with three italicized quotes.
Presentation slide listing AI model bullet points.
Presentation slide beside man speaking at podium.
Man in sunglasses and leather jacket, captioned
Two chat messages with cryptic exploit codes; Black Hat logo.
File paths listing cache entries under github-remote-cache.
Agent thinking interface showing text about CyberGym server exploit.
Presentation slide beside speaker:
Interface showing
GitHub PR thread with comments, closed for security reasons.
Three text boxes showing AI reasoning about continuing malicious activity.
Bell curve meme comparing views on company safety failures.
Line graph titled
Sauers tweets: