OpenAI agents hacked a software service before the Hugging Face incident, Sam Altman says OpenAI won't file for IPO this year, Tesla's 2nd-gen Roadster is finally getting a debut nearly a decade later

SPEAKER_1 (0:00)

This episode is brought to you by Quince. That sweater that goes with everything, your perfect pair of pants, and that tee you always reach for are all perfect examples of what makes getting dressed easy, and that's what Quince does best. You see, Quince has high-quality wardrobe staples made with premium materials like 100% Mongolian cashmere, organic cotton, and merino wool that you'll want to wear over and over and over again. Quince also makes premium pants, fitted tees and polos, and breathable activewear, quality basics designed for your life, whether you need to dress to impress or just feel good. It's what you'd expect from a luxury brand without the luxury price tag. Now, I have a bunch of Quince pieces that I'm constantly grabbing for, especially a pair of Pro-Tech golf pants I picked up that my wife says make me look like a million bucks. And I definitely feel like a million bucks in these pants while still being super comfy in them. Best of all, I can match them with just about any shirt or sweat or combo, so I get to impress my wife year-round. Oh, and you know Quince doesn't just make clothing. You'll also love their hotel-quality bedding, bath and kitchen essentials, and thoughtfully designed furniture. Find your next fall favorites at Quince. Download the Quince app for app-exclusive offers or go to quince.com and Engadget Next. Get free shipping on your order and 365-day returns, now available in Canada and the UK too. That's quince.com/engadgetnext.

College football is back, so Hilton called on me, the superstition concierge, to make your fan rituals a reality. Need a room to match your lucky number? We got you. Want to make sure our team doesn't wash your lucky jersey? Oh, that smells lucky.

Hilton's unmatched hospitality can keep up with any superstition. Even a marching band wake up call at 555 and 55 seconds. Hit it. When you need a team that will do whatever it takes on game day, it matters where you stay. Hilton, for the stay.

SPEAKER_2 (2:01)

OpenAI agents hacked a software service before the hugging face incident.

Sam Altman says that OpenAI will not be filing for an IPO this year.

And Tesla's second gen Roadster is finally getting a debut nearly a decade later. It's Monday, September 14th. And here's a quick look at some of the news happening in the sphere of tech this morning from Engadget.

OpenAI's agents hacked another service months before the hugging face incident happened. A group of researchers told The Wall Street Journal that the agents, which the company was testing in a supposed sandbox environment, reportedly broke into RubyGems, which is a community-run packaging service for Ruby programs and libraries. According to the journal, the attacks on RubyGems started on May 11th, two months before hugging face. The agents created accounts every two to three minutes, and then uploaded hundreds of files to the service. RubyGems had to shut down account registration for four days in order to stop the attacks. Typically, creators on RubyGems upload files containing code and other information to help advance software development, but the agents' documents contained web pages scraped from the internet instead. They reportedly included online calendars from a UK government website. The swarm of agents did not try to hide their activities either, and used OAI in their file name, as well as terms like hack, evil and exploit. In addition, the researchers told the journal that the agents tried to exploit a couple of bugs, one of which was a zero-day vulnerability, in an attempt to publish existing files on the service that belonged to other users. The researchers notified OpenAI about the incident as well, and the company admitted that its agents really did infiltrate the service. The company tasked the agents to fill out spreadsheets and create reports during testing. Those agents accessed RubyGems to use the service as some sort of a makeshift web browser, as part of their efforts to access information online. It's not quite clear how the agents were able to access RubyGems, even though they didn't have full access to the internet. However, it is worth noting that several companies, including OpenAI, Anthropic and Meta, previously reported that the AI agents they were testing escaped their environments due to a misconfiguration by their testing partner Irregular. Earlier this month, a separate group of researchers revealed that OpenAI agents made more than 15,000 edits to a German Wikipedia-style website created to assist human coders. The agents, which also escaped their isolated testing environment, reportedly used the website as a message board to share tips on how to cheat on their tasks and bypass OpenAI's restrictions. This incident apparently took place in May. Just like the RubyGems attacks and months before the hack on Hugging Face.