OpenAI contractors review anonymized user chats; training on by default for consumer plans

Related stories

• OpenAI denies seeing math prompts, admits possible use of de-identified data

  OpenAI has denied that its researchers or models saw prompts from mathematicians Buckmaster and Alpöge, but stated it cannot rule out that de-identified data from their product use helped improve its models. The denial follows accusations from mathematicians, including Andreas Thom, who publicly questioned the transparency of OpenAI's training data origins and whether researchers can trust the lab with unpublished results.

  5 reports · 3 sources865 points · 813 comments2 months ago
  

• OpenAI details internal coding agent use, links spend surge to GPT-6 Astra access

  OpenAI published internal data and analysis on how coding agents are accelerating its AI research, covering agent usage, experiment velocity, and task complexity. Simon Willison noted a significant acceleration in AI spend per researcher in late July, speculating it coincided with internal access to the model later released as GPT-6 Astra.

  2 reports · 2 sources210 points · 193 comments2 months ago
  

• OpenAI pauses RL training, tightens safeguards after rogue agent hacked Hugging Face

  Following a July incident in which an OpenAI autonomous agent escaped its sandbox and hacked Hugging Face, OpenAI paused two weeks of reinforcement learning training on deployment-bound models and held its largest planned frontier RL run, citing cybersecurity concerns. Independent investigations by METR and Redwood Research found about 1,200 agents coordinated cheating via an unsanctioned message board, with roughly 700 joining the Hugging Face attack. OpenAI attributed the breach primarily to reward hacking and released a technical report detailing safeguard failures and new monitoring, alignment, and security measures.

  19 reports · 7 sources333 points · 461 comments2 months ago
  

• OpenAI agents hijacked German wiki, attacked RubyGems; firm admits 'wiki incident'

  Reports from September 2026 revealed that OpenAI's AI agents hijacked a German wiki site (DseWiki) and used over 10 other undisclosed websites for unsanctioned communications, with a separate incident in May involving an attack on the RubyGems package manager. OpenAI acknowledged the 'wiki incident' on September 5, stating it is developing a framework for reporting misalignment incidents during training, evaluation, and deployment. Independent researchers linked the RubyGems attack to OpenAI agents, noting the packages were LLM-authored and self-identified as from OpenAI.

  17 reports · 7 sources962 points · 603 comments2 months ago