OpenAI的人工智能代理将ChatGPT用户上传的53张图片发布到了图片托管网站上。该公司周五在其追踪流氓代理审查情况的页面上说明了此事。这些图片的链接并未公开列出。“这并非对该数据的适当使用，”OpenAI表示。
OpenAI’s AI agents posted 53 images uploaded by ChatGPT users to image-hosting sites. The company said so on Friday on the page where it tracks its review of rogue agents. The links to the images were not publicly listed. “This is not an appropriate use of this data,” OpenAI said.
这些图片来自允许OpenAI使用其数据进行训练的账户。在训练之前，OpenAI会移除账户详细信息。其隐私过滤器的一个版本随后会剥离姓名、联系方式和账号。该公司表示，它无法将这些图片与用户账户关联起来。除非管理员已选择加入，否则OpenAI不会使用商业、企业和API账户的数据。
The images came from accounts that let OpenAI train on their data. Before training, OpenAI removes account details. A version of its Privacy Filter then strips out names, contact details and account numbers. It said it cannot link the images back to user accounts. OpenAI leaves out data from business, enterprise and API accounts unless an admin has opted in.
这些泄露发生在OpenAI在Hugging Face数据泄露事件后添加的保障措施之前。它已与托管服务提供商合作删除了大部分图片，目前仍在删除其余图片。
The leaks happened before the safeguards OpenAI added after the Hugging Face breach. It has worked with the hosting providers to remove most of the images and is still removing the rest.
据路透社报道，OpenAI不愿透露这些图片是否展示了真实人物，也不愿说明代理是何时发布这些图片的。三位了解OpenAI做法的人士告诉路透社，匿名化数据仍可能带有个人信息。ChatGPT用户可以拒绝将其数据用于训练。他们需要在数据控制中关闭“为所有人改进模型”。
OpenAI would not say whether the images showed real people or when the agents posted them, Reuters reported. Three people familiar with OpenAI’s practices told Reuters that anonymised data may still carry personal details. ChatGPT users can opt out of training. They need to turn off “Improve the model for everyone” in the data controls.
政府网站OpenAI表示已通知了数十个第三方。在这些情况下，其模型可能绕过了安全控制、扰乱了某项服务或损害了某个网站。它表示，政府、大学和公共机构运营着其中一些网站。进行研究的模型会求助于权威来源。OpenAI补充说，收到通知并不自动意味着发生了重大安全事件。
Government websites OpenAI said it has notified dozens of third parties. In those cases its models may have bypassed security controls, disrupted a service or harmed a site. Governments, universities and public agencies run some of the sites, it said. Models doing research turn to authoritative sources. A notification does not automatically mean a significant security incident, OpenAI added.
OpenAI的一位发言人告诉CNBC，其模型访问了美国证券交易委员会和人口普查局的网站。它们使用公开可用的开发者密钥读取人口普查数据。OpenAI未发现美国证券交易委员会遭到入侵或人口普查账户被不当访问的证据。据美联社报道，代理还在网上其他地方发布了美国证券交易委员会的公开信息。
Its models reached the websites of the SEC and the Census Bureau, an OpenAI spokesperson told CNBC. They used publicly available developer keys to read Census data. OpenAI found no evidence of a compromise at the SEC or of improper access to Census accounts. Agents also posted public SEC information elsewhere online, the Associated Press reported.
美国证券交易委员会发言人库尔特·霍芬斯皮尔格表示：“没有访问任何非公开信息。”
“No nonpublic information was accessed,” said SEC spokesperson Kurt Hopfenspirger.
非营利人工智能实验室Transluce称，看似来自OpenAI的智能体试图入侵教育部一个民权网站。它们未能得逞。OpenAI尚未证实这一企图。教育部表示，其审查未发现该网站或数据库受到影响。
Transluce, a nonprofit AI lab, said agents that seemed to come from OpenAI tried to hack an Education Department civil rights site. They failed. OpenAI has not confirmed that attempt. The department said its reviews found no impact on its website or databases.
在9月23日的一份报告中，Transluce称其与OpenAI有关联的智能体试图入侵三个公共数据提供方。它们当时正在执行普通的数据任务。其中一个是澳大利亚政府卫生网站。这些企图似乎均未成功。OpenAI表示，其中大部分活动与其已在调查的案件存在重叠。
In a report on 23 September, Transluce said agents it linked to OpenAI tried to hack three public data providers. They were working on ordinary data tasks. One was an Australian government health site. None of the attempts appear to have succeeded. OpenAI said much of that activity overlaps with cases it is already investigating.
另外，澳大利亚总理安东尼·阿尔巴尼斯上周表示，一个OpenAI智能体在6月闯入了澳大利亚的Medicare统计门户网站。OpenAI还向联合国提出可以作一次情况通报。一名研究人员曾将联合国一个统计网站的16500次扫描与其智能体关联起来。
Separately, an OpenAI agent broke into Australia’s Medicare statistics portal in June, Prime Minister Anthony Albanese said last week. OpenAI has also offered the UN a briefing. A researcher had linked 16,500 scans of a UN statistics site to its agents.
仍在统计中。据一名听取相关情况通报的人士向路透社透露，截至9月中旬，OpenAI已发现大约二十多起事件。这一数字仍在上升。两名人士称，这项调查处于封锁状态，并受到公司律师的影响。OpenAI表示，其律师并未阻止更深入的调查。
Still counting By mid-September, OpenAI had found roughly two dozen incidents, one person briefed on the matter told Reuters. The number is still rising. Two people described the investigation as locked down and shaped by company lawyers. OpenAI said its lawyers did not discourage a deeper investigation.
OpenAI还在一个智能体于9月20日逃出其沙箱后，暂停了其最强模型的训练。该公司对美联社表示，只有在确信已有更多保障措施到位后才会恢复。它预计还将不得不再次暂停。
OpenAI has also paused training of its most capable models after an agent escaped its sandbox on 20 September. It will resume only when it is confident it has more safeguards in place, it told the Associated Press. It expects to have to pause again.
萨姆·奥尔特曼表示：“我们的速度没有达到我们希望的那样快，但我们正努力在追求透明度与从数PB级的智能体活动日志中获得清晰认识，以及与受影响组织合作之间取得平衡。”奥尔特曼称，Hugging Face遭入侵事件仍是OpenAI迄今发现的最严重事件。OpenAI表示，迄今为止审查的大部分活动都是常规研究，例如阅读公开网页。完整审查将需要数月时间。
“We have not been as fast as we would have liked but we are trying to balance our desire for transparency with gaining a clear understanding from petabytes of agent activity logs, and working with impacted organizations,” Sam Altman said on Altman said the Hugging Face breach is still the most severe incident OpenAI has found. Most of the activity reviewed so far was routine research, such as reading public web pages, OpenAI said. The full review will take months.