Rob T. Lee

Rob T. Lee

@robtlee · Twitter ·

Stop scrolling and watch this. (This is important.) Zack Korman Just published one of the best opinion pieces I've seen on the OpenAI incident, and it reframes the whole thing as cybersecurity versus AI safety. [11/12] minutes. Worth every one of them. No. Really - watch it. Give it a think. It's important. I need a bunch of people debating this. I have to think about this as well, but it needs to be debated. My admission: I'd been meaning to figure out who METR actually is for over a week. It kept bugging me. Then I forgot and slid straight into assumption land. Nobody else was questioning them, so they must be qualified. (My internal skeptic apparently took the week off.) Then this video. The number of questions it opened up for me felt like a punch in the face. I was so excited that a public incident report existed at all (credit where due; publishing one is still rare and still commendable) that I skipped the part where I interrogate whether the folks who wrote it took a single SANS class (or any class in cybersecurity) If you work in incident response, if you work anywhere in cybersecurity, this should be required listening today. Watch it, then repost it and get it in front of your team. We need some discourse on this. The cybersecurity insurance industry especially - are you ok with this too? Regulatory? The impacts cascade - and this is the only piece that does a wonderful job on the pitfalls that METR did on this. (And if there is a ton of discourse on this already - I'll admit that I must be focused on Openclaw 2.0 a bit that I've been distracted.)

Zack Korman

The independent review of the OpenAI Hugging Face incident, supposedly a watershed moment in cybersecurity, wasn't done by a cybersecurity firm and the authors have no cybersecurity experience. That's bad. Here's my new video.