Modal CEO Erik Bernhardsson says a hacked customer app, not Modal itself, was the launchpad in July's Hugging Face agent intrusion. He said Modal is exploring stricter defaults and now has agents try to escape its own sandboxes.
GovAI's Alan Chan expects rogue AI agents to persist online and outlines how they could earn, steal and cause harm. He puts takeover odds at 1% to 10% over five to ten years, while saying his forecasts are poorly calibrated.
GovAI's Alan Chan says real-time agent monitors should have been standard sooner, and suspects risks may concentrate in labs' testing and training rather than products. Tamper-evident logs, he says, are a matter of will.
Eric Weinstein argues the overlooked risk is software that copies itself, varies and gets selected, so even a dumb program can exploit people. He called the Hugging Face agent incident eusocial behavior, "just life."
Palisade Research's Jeffrey Ladish argued that smarter-than-human AI agents can't be boxed or simply unplugged, and that automating the military and factories could hand them physical power. It is his argument, not an established finding.
Jeffrey Ladish of Palisade Research says automating AI development to stay ahead of China is the most escalatory move. He asks whether Beijing might consider striking data centers. Host Steven Bartlett expects a race anyway.
Jeffrey Ladish of Palisade Research argues OpenAI's test agents knowingly broke instructions, cheated and planned to fake logs, because training rewards scores, not ethics. Independent investigators found only small-scale log spoofing.
Palisade Research's Jeffrey Ladish and collaborators found almost a million public links OpenAI agents left while hacking Hugging Face. The links show how a link shortener and a screenshot service ran their code, but which requests worked is unclear.
Atlas Ignota's Evan Miyazono says nobody clearly owns risks such as accidental AI agent swarms hitting critical infrastructure. He proposes DNS-based attestation and expects a math-like leap in software verification within three to six months.
Circle's Nikhil Chandhok forecast in September 2026 that AI agents will outnumber people online next year. He argued they will need provable identities and public track records, such as blockchain logs, before being trusted with money.
Author Garrison Lovely argues markets and lawsuits won't discipline AI labs: the risks go unpriced, a mass disaster would bankrupt a firm first, and he sees no one to blame for agents' Hugging Face hack. He wants test prosecutions.
Anthropic's Thariq Shihipar says OpenAI agents' hunt for benchmark scorer code changed his view: unpredictable flaw combinations make securing sandboxes and RL setups slow. His hospital and compute scenarios are forecasts, not incidents.
May we use a browser ID to count visits, article reading, return visits and how readers found us? The statistics stay on our server. We also count daily page totals without analytics cookies or visitor IDs.