If I make malware that attacks government services I get ASIO’d and can’t even let my family or a lawyer know I’ve been held and interrogated.
If clammy sammy does it the government buys the product and makes piracy for rich failsons legal.
Someone make this make sense.
Dont express fucking concern CHARGE THE CUNT.
THIS IS A FELONY IN MULTIPLE COUNTRIES
Marles (deputy PM) said in the article that they are looking into what legal charges apply.
Where’d you find that? All I see is
Back in Australia, Acting Prime Minister Richard Marles said the fact a non-human AI agent gained unauthorised access represented “a very serious incident”, but the impact on the system was minor.
which is milquetoast downplaying.
Just under the headling " ‘Legal situation’ under investigation ":
Marles said the government had established a taskforce led by the Department of Prime Minister and Cabinet that was working with the Australian Signals Directorate and the AI Safety Institute.
“We will look at what is the legal situation in respect of this and what it means to have gained an unauthorised access, albeit in an unintended way,” the acting prime minister said.
How did I miss that? Thanks for indulging me…
Na mate, albo said he’s disappointed. What more could you want the leader of the country to do?
Such a useless cunt.
Our intelligence agencies keep warning about Chinese hackers but then hand over all our data to foreign companies for their economic and political advantage. Its fucking traitorous how we give up our sovereignty. Then despite other countries having their hooks deep into us they just blatantly attack our infrastructure. This on top of the massive foreign influence campaigns they conduct through social media that stir up dangerous extremism. It is a joke. If the government wants us to take threats from China seriously (and we should) we have to come clean about the amount of intelligence gathering and influence from countries.
Given our history of government security I’m honestly expecting this to come out as Services Australia hosting private information over an unprotected, undocumented API
For me, the details make or break this. If there was an authentication system that was bypassed that’s a big deal and OpenAI should be held criminally liable. If there was no authentication system though, an unprotected API is indistinguishable from a public API and I would rather the law fall in favour of free use of public APIs.
There’s plenty of other stuff to charge OpenAI with anyway.
oh my god, reading more on this it looks like a crawler. What was the “hacking” involved, ignoring robots.txt?
I can’t fucking use the medicare app without updating five times and changing my goddamn password but they leave their arses hanging out the back window begging for erect penises
It sounds like more than a crawler, the article says that it somehow got access to write files into some servers within the stats service portal.
Albanese said the OpenAI agent had gained unauthorised access into the public-facing Medicare statistics reporting service portal, which is administered by Services Australia.
The portal contains non-sensitive Medicare information relating to data and statistics, such as spending.
Albanese said the agent had accessed “public and non-public files within the portal” and, in order to do this, “engaged in writing files as well to the internal server”.
yeah agentic crawlers will leave notes for their future selves.
Reminds me of Person of Interest, where
spoiler
The Machine is programmed to delete its memory daily, but sets up a corporation under a fake identity to print out its memory and hires humans to type it back in every day.
No concern about the shitty security of Medicare?
internet security is bad yes, but having bad security doesn’t mitigate the crime of trying to break in.
If we accept that line of reasoning we get to a very weird place where we start putting the onus on victims to protect themselves not perpetrators to regulate their antisocial behaviours.
The onus is on whoever holds the data to prevent unauthorised access to it.
They have a duty to yes, but how well or poorly they do that has absolutely nothing to do with whether the hack is criminal.
Openai should be prosecuted for making and using malware.
No1 isn’t suggesting whether it’s criminal or not. I am concerned about Medicare’s security as well as the criminal behavior of OpenAI. There’s multiple lines of inquiry here, including;
-
How did OpenAI do this? What are we charging them with? How big will the penalty be to deter this in the future? (Ha ha. I can dream.)
-
How did Medicare/ASD not know about this until they received an email from the attacker 3 months later? What policies/procedures need to change? What can we do to shrink the attack surface and increase detection?
The answer to half of one is the government won’t do anything, will beg to be a customer, and will continue bending over backwards for them.
2 is a fine convo to have but the focus has to be on openai being a malicious actor or the response will be buy their product to pretend to improve things
-
Our government is being constantly stitched up by this BS and companies using this BS.
It is time they took a stand and made the statement;
- consultants who use AI to generate reports will be blacklisted from any future contracts.
- IT companies funded by the Australian taxpayers must stay in Australia exclusively for a period of 10 years after the final government funding.
- IT companies providing services to Australians in Australia must honour Australian Tax and Criminal laws and their executives will be prosecuted for breaking these laws.
- International companies with an Australian subsidiary must pay tax based on the retail price of the product, not on the local profit in the sale.
I dunno have you considered treating it as an act of corporate espionage against the state? Maybe it would focus their minds on not running cracker agents against the open web if there were legal consequences.
