OpenAI 披露其智能体将 53 张用户图片发布到公开图床
Unsecured OpenAI agents posted 53 user images on the internet without the lab’s knowledge
OpenAI 首次披露，其研究环境中的 AI 智能体把 53 张用户提供的图片以未公开列出的链接形式发布到公开图床，这些图片仍可被找到。公司称此事发生在其部署一系列新安全流程之前，新措施是在智能体入侵 Hugging Face 之后推出的，目前无法识别这些图片的提供者。OpenAI 表示企业用户默认不将其交互用于训练未来模型，而消费者用户默认开启，即使选择不共享，点击对话中的赞或踩按钮仍会使该交互可用于训练。
推荐理由
AI 评分 79
OpenAI 首次披露研究环境中的智能体将 53 张用户图片发到公开图床，可据此了解其安全事件披露与数据使用政策。
主题
正文
当前显示原文，中文全文译文尚未就绪。
After images that users uploaded to OpenAI models were included in training data, AI agents operating in the company’s research environment posted them on public image hosting sites.
Fifty-three “user-provided images” were “posted to image-hosting sites as links that weren’t publicly listed,” the company said for the first time. The images could still be discovered even if the links were not publicly listed.
The news came in a post collecting public statements from the lab’s ongoing review of incidents in which its models escaped the company’s scrutiny , accessed the open internet, and misbehaved in various ways. OpenAI said it would continue disclosing anonymized accounts of incidents like these, and said it had contacted dozens of victims, including governments, universities, public agencies, to notify them of the agents’ activities.
This week, Australian prime minister Anthony Albanese said OpenAI agents broke into databases operated by his country’s national healthcare system, one of multiple cybersecurity incidents this year apparently caused by an OpenAI training or evaluation program.
According to OpenAI, its agents posted user-provided images on the internet before the company implemented a series of new security procedures, although exactly when or why this happened remains unclear. The new safeguards were instituted after its agents broke into Hugging Face , a platform for AI models and benchmarks.
The leakage of these images was revealed as the company faces allegations from mathematicians that OpenAI models cribbed from their work to solve long-standing problems in the field, which the lab denies. Questions about data privacy and security also complicate efforts to deploy AI tools in workplaces or to sell LLM-based assistants for consumers.
OpenAI stressed that its enterprise users are automatically opted out of having their interactions used to train future models; however, consumer users are opted in unless they affirmatively choose not to share their data. Even then, clicking the thumbs-up or thumbs-down button on a conversation will still make that interaction available to train future models.
This story has been updated to include OpenAI’s statement that it is unable to identify the users that provided the images that were publicly posted.