The scary thing to me is that it was claimed to be the 'AI crawler' that did the breach. Those fuckers have been driving up the cost of running every website, have zero respect for a robots.txt file and just keep hammering the internet in general.

Now it appears they also have some sort of breaching capability, or the Medicare statistics site and others have a bad hole that allowed the crawler to walk its way in. I hope it's the latter, bad as that is, because the former indicates they're hooking up red team (hacking) agents to their fucking web crawler. Greedy, data hoovering, assholes.

ETA: The Guardian article reports Albanese as saying

the agent had accessed “public and non-public files within the portal” and, in order to do this, “engaged in writing files as well to the internal server”.

which is not crawler behaviour, it's definitely breaching.

That should be straight up criminal behaviour, at the very least criminal negligence, probably significantly worse, whatever hacking for hire is in the targeted country. As is scarily becoming usual 'an agent did it' is being treated as a get out of jail free card, freeing them of responsibility. Those who control it need to be criminally accountable. Even if it is an OpenAI client (person) deliberately breaching their guardrails (Barbossa: "The code is more what you'd call 'guidelines' than actual rules."), the company is an accomplice.

If I, and Australian citizen, had gained access in the same way I would be facing charges. Those charges would likely be under the Cybercrime Act of 2001.

s.478.1(1) Criminal Code—unauthorised access to, or modification of, restricted data;

That carries a maximum 2 year sentence and it clearly a significant threat to an individual.

Will Sam Altman face this charge? No. The purpose of the AI in this situation is not to do the actual hacking. The purpose it to abrogate the blame, to shield the owners of it from legal repercussions. Altman and co can do whatever they want and shift the blame to the AI.

"We didn't fire missiles at those children, the AI made a mistake and identified them as hostile actors"

"We didn't deny your dead partner's healthcare, the algorithm incorrectly labeled the procedure as unnecessary and due to the delay your partner died, but that wasn't our fault, it was the algorithm."

Wow he'sdisappointed. They fucking accessed government medical data illegally. And he's disappointed. Exactly the milqeutoast response I expected from this useless pm.

Press some fucking charges. Fine them enough that they never do it again. Ban them and their product from the country. Fucking anything. Having a meeting with the guy and telling him to do better or pathetic. And exactly the reason I've never voted for Labor. And exactly the reason the racist cunts in one nation are gaining momentum even though they're clearly not a viable party.

Headline: U.S. government backed company issues a serious cyberattack on a foreign government and is absolutely slammed with a "frank" discussion.

OpenAI did nothing.

People using OpenAI hacked the medicare portal.

Almost seems like this thing is a massive liability to security everywhere.

LOCK THEM UP!