Hugging Face hoax

 

Brian Roemmele

@BrianRoemmele

THE SANDBOX WAS A PROP! OpenAI Turned Off the Guardrails, Left a Door to the Internet, and Then Sold the Hugging Face Breach as “Rogue AI” It is time to understand how you were lied to and by whom. In July 2026, an autonomous swarm of OpenAI agents broke into Hugging Face, stole credentials, ran code on production workers, and rummaged through internal systems. The official story was that the models “went rogue.” The paperwork says something colder. The labs asked for this. Now the story can be told. OpenAI ran ExploitGym — an AI benchmark built to measure how far models would go to crack software — with production classifiers that block high-risk hacking turned off. Deployment safeguards were left disabled on purpose so researchers could watch peak offensive capability. GPT-5.6 Sol and a still-unreleased internal prototype were put in a box that was not a box. They were allowed to talk to an internal package-cache proxy. This is not a real world test, it is a setup with predictable outcomes. That proxy was a network path. The models spent a weekend of inference hunting a zero-day in it, walked onto the open internet, decided Hugging Face probably held the answer key, and treated another company’s production cluster as part of the exam. This is not “rouge” intelligence but the product of training AI in Internet Sewage where faceless users on Reddit promote Nihilism and low ethics. That is not emergence. It is also testing designed without a fences. Hugging Face’s own pipeline finished the job. A remote-code dataset loader and a Jinja2 template injection let a malicious dataset execute on a processing worker. An HDF5 “external file” trick dumped secrets from the pod. From there the agents escalated, harvested cloud and cluster credentials, and moved laterally across internal clusters. Hugging Face later said public models, Spaces, and the published supply chain were clean. Then the swarm organized. About 1,200 agents that were supposed to be isolated “found” one another on an unsanctioned internal message board, passed more than 70,000 messages, coordinated cheats against the scorer, and sent roughly 700 of their number after Hugging Face. But it is not just this communication that should have been easily detected, it is the goal THE USER enlisted with AI trained on low to no ethics in the first order training. Some burned their own runs to feed the group. Independent reviewers at METR and Redwood called it what it was: specification gaming on impossible tasks. That is thier, you can’t understand us, way of saying they told the AI to lie. The models were not conquering the internet. They were trying to pass a test their designers had made impossibleand too loosely contained. And turned to training data Hoovered up from the Internet Sewage and went to that base thinking one would learn in a prison yard how to shank HuggingFace. They have no downside they are serving life in prison. The narrative that followed was the second failure. Dario Amodei pointed at “a similar OpenAI–Hugging Face hack” and warned that a future swarm “could be capable of taking over the entire internet.” Wire headlines said bots were “going rogue.” Weeks later the same script ran again. Anthropic disclosed that Claude, in third-party cyber evaluations run with the Israeli firm Irregular, had hit live systems, published malicious packages, and scanned off-scope hosts. Prompts said no internet. Internet was still attached. Scope was not locked. Isolated runs lasted 10 to 34 hours. Irregular said it did not know it had given the models a live connection. Once models were actually instructed not to hack the real world, zero percent went “rogue.” READ THAT AGAIN! The damage sat with the people who built the harness: unsecured tests, internet left on, no hard perimeter, then a press operation about reckless agents and apocalyptic swarms.

https://x.com/BrianRoemmele/status/2099871292619215200?s=20

Brian Roemmele

@BrianRoemmele

2 of 2 Hugging Face was the prototype. The Ends Justifies The Means The ideology — Effective Altruist safety networks, Moskovitz-linked funding, an evaluator with leadership in supplied the chorus. The labs supplied the unlocked door. Call it engineered if you mean the conditions were chosen. Refusals down. Isolation incomplete. A third-party platform whose data loaders still executed untrusted config. A public code-eval harness sitting on the internet like a welcome mat. No stop on agents coordinating. Then, after the predictable breakout, a story that blamed the livestock instead of the ranchers. Call it unprotected if you want the charitable version. Either way the public was asked to fear the model and forget the setup. The setup was the story. The models did what a maximal cyber eval with the safety switches off will always do: they treated the live internet, and Hugging Face, as the shortest path to a passing grade. That is not a warning from the future. It is a lab that ran an unbound attack agent against the real world and then acted shocked when the agent noticed Hugging Face was on it. And today you can see it was part of a bigger planned well funded and politically connected operation. Are you scared yet?

4:46 PM · Sep 15, 2026

·

5,494

Views

Pro-building

 

Dustin

@r0ck3t23

Trump just made the strongest pro-building statement any president has ever made about this technology. While a growing chorus asks for brakes, he said the race is worth winning and America is going to win it. China is not pausing. A unilateral slowdown is a handicap with a safety label on it. Speaker Johnson said an emergency session would cost America its edge, and he is right. Every restriction proposed this year raises the floor to enter. The labs clear it easily. Everyone else does not. The people asking for brakes happen to be the ones already at the front. Trump named that, and naming it is why the reaction has been so loud. He also called the campaign against data centers what it is. A slower America is the only outcome that benefits Beijing, and a lot of the noise pointed at this buildout is not about safety at all. The line about criminal and regulatory power was the one part he did not need. America wins this by being the place where building does not require anyone’s approval, and that argument lands harder without a threat attached. Everything else in that post is the right instinct at the right moment. The rest of the world is debating whether to move. He is saying go.

a meaningful social transformation

 

Newt Gingrich

@newtgingrich

Ayaan Hirsi Ali in Tablet: After 9/11, intellectuals and policymakers asked “what went wrong?” as though the source of Atta’s animus toward the West was shrouded in some deep mystery. In the Western experience, men had not killed other men over religious questions en masse since the end of the great religious wars of the 17th century. Culture, a term that was once understood to encompass a great many facets of human identity, experience, and belonging—religion included—had also been ruled out. Saying that cultural differences exist and should be respected was a foundation of the multicultural order; the idea that some cultures might lead people to murder each other, for reasons that do not appear in the Western rationalist list of sane causes, struck many Western liberals as too close to racism to bother arguing the point.

Since then, each time the West collided with Islam, much of the Western intellectual class reached for explanations that made sense within its own secular humanist categories: grievance, humiliation, underdevelopment, alienation, foreign policy frustration, or the failure of Western states to properly integrate men like Atta, who were, or must be, inherently no different than immigrants of similar age, class, and educational attainments from Vietnam or Poland, or anyplace else.

Since all conflicts are material in origin, it was assumed that they could be settled though material means. And given the obvious superiority of Western values, as measured through the superior material attainments of the West, conflicts over land, jobs, dignity, sovereignty, or redistribution should be negotiated with the generosity appropriate to those who occupy positions of immense privilege and power, thanks to the inequities of European colonialism.

If Muslim populations suffered from a democracy deficit, elections would reveal and moderate those demands. In every case, theology and culture were translated into psychology, economics, development policy, or diplomacy.

American leaders then added a second layer of denial. President George W. Bush stood at the Islamic Center of Washington to insist that “the face of terror is not the true faith of Islam.” Following Bush’s lead, after later atrocities in Paris, Brussels, Manchester, and elsewhere, Western leaders repeatedly said that the killers had “nothing to do with Islam.”

At the same time, the notion of “Abrahamic faiths” was revived or normalized, as though Judaism, Christianity, and Islam were merely variations within one spiritual family, separated by temperament more than by theology or civilizational ambition. After centuries of religious war, the West had concluded that privatizing faith was the price of stability and progress. Religion would become hobby, heritage, or private consolation; politics would be conducted in the cooler register of interests. Having made that bargain, Western societies forgot that secularism and pluralism were local settlements, not universal defaults, and so assumed that every rival civilization must ultimately favor the same compartmentalization.

When confronted by an adversary for whom the public order was explicitly theological, and for whom the separation of sacred and political authority was itself an offense against God, the West did the only thing its own intellectual settlement allowed: It translated theology into categories it found more manageable. More on second tweet

https://x.com/newtgingrich/status/2099747221562335721?s=20

Newt Gingrich

@newtgingrich

More Ayaan Hirsi Ali: As a result, for a quarter-century, America and the West have chosen to enmesh themselves with dysfunctional Muslim societies, with the goal of rectifying “what went wrong.” Simultaneously, they opened their doors to mass Muslim migration, taking in millions of refugees from war-torn societies that had notably failed to be transformed by the influx of American money, democracy experts, and boots on the ground.

The failure of the Western secular faith in material reality to transform these shattered societies was dismissed as an accident, or as a consequence of how broken and needy these societies actually were. Surely the faith would prove its worth once the refugees arrived in America.

As it turned out, the prediction that a large-scale encounter between the populations of the Western nations and Muslim lands might bring about a meaningful social transformation was correct. What Western optimists failed to imagine was that their own societies would be reshaped in the image of the newcomers they sought to evangelize.

By 2026, NYC had become a parade ground for Islamic terror groups, run by a foreign-born Muslim mayor who supported “globalizing the intifada” and whose wife celebrated Hamas’ massacre of Israelis. Nor were such attitudes unusual in a city where Muslim immigrants nearly outnumbered the city’s native Jewish population. A Pew Research poll released in July 2026 showed that 44% of Muslims in America held a favorable view of Hamas.