HN

Need help?
<- Back
OpenAI breaches Medicare, Albanese reveals

OpenAI breaches Medicare, Albanese reveals

jonnonz

Comments (87)

  • Lukas_Skywalker
  • Chance-Device
    > He said the agent had accessed files that were publicly available as well as material that was not intended for public access.“Not intended”. I’ll bet you whatever this was it wasn’t even secured, it was just hosted somewhere openly.
  • gravelc
    The fact the incident occurred in June and OpenAI only notified the Australian government on September 10 is a major issue. Hacking a nation-state's universal healthcare system is about as serious as it gets, yet OpenAI seem quite relaxed about the whole thing (presuming they have known about it for some time).
  • simonw
    If it was the Australian Medicare Statistics Reporting Service on June 18th it may have been part of this incident: https://collusion.wiki/ - the bulk of that coordinated activity was between 16th and 21st of June, and we know they were hitting UK government data sites.I had a dig around in the data that they published on that site and found references to www.aihw.gov.au and viz.aihw.gov.au and vizprod.aihw.gov.au
  • bonsai_spool
    This feels like a very credible opening to a modern-day Terminator reboot. Sometime over the Christmas-NYE week we will learning that NYSE and other exchanges have been compromised, as well as all public-facing utilities...
  • nxobject
    Beyond the breach, I think OAI deserves to answer: what and why did it access the information? Real people and their data are involved.It looks like the PM gave Sam Altman a "tsk tsk". It will be interesting to see whether someone else tries to impose more consequences.
  • BeetleB
    What's notable is:1. AFAICT, they don't state whether the flaw has been fixed.2. He said: "The government will establish a task force led by the Department of the Prime Minister and Cabinet to urgently examine the incident and determine whether existing processes are adequate for responding to AI-related cyber incidents."First, I don't know how sophisticated the attack was, but it's interesting that he's positioning this as an "AI-related cyber incident". For all we know, their security was not up to snuff, and human hackers had already accessed the material.At least OpenAI informed them of their poor security!
  • Topfi
    Didn't OpenAI just make a commitment to inform the public about their "accidents" going forward? Can't find this anywhere on their website despite them having known this for at least 14 days...
  • mbgerring
    We need to stop beating around the bush and hit these companies with severe criminal charges. There is no good reason to allow these companies to behave as if they’re above the law.
  • RGS1811
    We can only guess how many of these incidents actually happened.
  • StevenNunez
    These are still crimes right? Asking for a friend.
  • xbar
    Missouri Governor Mike Parson publicly labeled St. Louis Post-Dispatch journalist Josh Renaud a "hacker" for such a "breach." He launched a multi-month criminal investigation by the Missouri State Highway Patrol, threatening criminal and civil prosecution. My take was that such action was idiotic. Renaud was never charged.AI agents are going to find things that you put on the public Internet without authentication. If you put sensitive things in there, you have created an AI-attractive-nuisance (IMHO/IANAL).
  • chrishare
    Are there technical details anywhere?
  • keithnz
    very little details so far, really curious if it actually "hacked" or just found unsecured resources.
  • iloveoof
    I hate how the framing is always that “an AI agent” did something. No, an OpenAI researcher breached Medicare by using an AI agent. These tools only do what they are directed to do. The human operator is wholly responsible for what the tool does.
  • anon
    undefined
  • Invictus0
    Title should say it's Australia's medicare
  • underyx
    Man I can't believe now even the Australian government is hyping the OpenAI IPO, what do they even have to gain from this??
  • kakadu
    Either it's yet again a marketing ploy or federal police needs to move in
  • enraged_camel
    At this point we should be asking if there's anything or anyone OpenAI's agents didn't hack.OpenAI's display of incompetence and negligence is absolutely stunning.
  • protocolture
    The order of operations here seems to be:1. Albo goes to meet with Altman to discuss AI safety2. Altman says "Yeah bro we hacked medicare"3. Albo seemingly acts as Altmans stooge and lets everyone know that a hack took place, helping cement the AI danger narrative Altman has been pushing.4. Police Taskforce is being put together now (indicating no hack was detected earlier, which seems unlikely for Medicare) at the say so of Altman to investigate.There doesnt appear to be any evidence of a hack that has been presented, there doesnt appear to have been any detection of a hack earlier (it doesnt make sense for the government to hide a medicare hack until it can be used for OpenAI marketing)Once again, the whole thing smells so bad.