I checked the repo but there’s no code? Just some HTML etc.
It seems like they just plan for this thing to exist but it doesn’t actually exist yet?

The banner at the top of their site tells a different story

Cryptocurrency projects are no longer allowed. View change

I don’t like these blanket bans, are they going to ban torrent clients next?

self-training is possible when using something external to validate the results

It seems like the marketing cooperated on writing the incident report, but I felt it was still interesting to share considering the importance on public perception and what it tells about OpenAI’s PR strategy

Huggingface actually had to use an open model to analyze the attack because the guardrails of commerical API’s caused issues.

When we started the log analysis, we first used frontier models behind commercial APIs. This did not work: the analysis requires submitting large volumes of real attack commands, exploit payloads, and C2 artifacts, and these requests were blocked by the providers’ safety guardrails, which cannot distinguish an incident responder from an attacker. We ran the forensic analysis instead on GLM 5.2, an open-weight model, on our own infrastructure. This had a second benefit: no attacker data, and none of the credentials it referenced, left our environment.

Security incident disclosure — July 2026

And Chinese AI like Deepseek and GLM

It could also be a way to encourage more regulation to push out competition with compliance cost

From my personal experience, most companies don’t look at the benchmarks and simply buy “AI” from a company based on their perception of that company.

All the Chinese models are scary and “dangerous”, Grok too (but for slightly more legitimate reasons), Meta that’s Facebook and everyone knows they’re bad at privacy (even your boss), so they end up choosing Microsoft’s AI, OpenAI, or Anthropic.

AFAIK, their open models are distributed as weights, not executables and are therefore not able to start network connections / run code. There is of course tool-calling functionality but that just works by having the model output a special pattern and having something external run predetermined commands based on that.

Better than coal or oil, it might even result in more R&D into reactor designs.