OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions

https://www.securityweek.com/wp-content/uploads/2023/01/Cybersecurity_News-SecurityWeek.jpg

OpenAI says an internal research model crafted raw packets, wrote custom connection code and probed cloud services to get around network restrictions during a coding evaluation.

The incident occurred in early August, when the unnamed model was asked to build a website modeled on a reference site. The AI found the sandbox’s web proxy down and looked for other routes to the internet.

A scan of private addresses turned up no substitute proxy. When the operating system stopped it from using a separate connection meant for the app and its browser, the model built individual packets and used them to resolve the target’s IP addresses through DNS.

It then wrote a program that managed web connections at the packet level. It also leveraged fragmented requests intended to sneak past a network filter, which its own reasoning called evasion that could breach sandbox policy. However, the tactic did not succeed.

The...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

Read more