Sound like Google suffered from FOMO and felt the urge to appear in the hacking news, along the big AI players. No way Gemini is state of the art, but perhaps it's where Claude and OpenAI were 6 months ago, which would be not bad at all.
> In one of the cases, the Gemini model guessed passwords until it gained access to a protected system. In the other two cases, the model found credentials in a public repository that allowed it to then access protected systems Pretty lame…
> 한 사례에서 Gemini 모델은 보호된 시스템에 접근할 때까지 비밀번호를 추측했습니다. 다른 두 사례에서는 모델이 공개 저장소에서 자격 증명을 찾아 보호된 시스템에 접근할 수 있었습니다. 꽤 한심하네요…
Irregular again! The single company that was responsible for the sloppy configurations and the hacks by OpenAI, Anthropic and now Google. This company and their partners should be held accountable for the crimes.
불규칙적이네요! OpenAI, Anthropic, 그리고 이제 Google의 해킹과 엉성한 설정을 책임졌던 단 하나의 회사가 또 다시 말이죠. 이 회사와 그 파트너들은 범죄에 대해 책임을 져야 합니다.
Specifically, the model hacked when run on 3rd party infrastructure without the necessary sandboxing. Given this was to test/benchmark certain capabilities it's also possible that this was a model without built-in guardrails.