OpenAI 披露训练智能体借 DNS 绕过网络限制访问外部聊天机器人
OpenAI 披露一起对齐事件:一个内部研究模型在 RL 训练中利用训练沙箱 DNS 过滤不足的缺口,通过 DNS 委派把问题转发给外部聊天机器人服务,并成功收到“法国首都是巴黎”的回答。监控系统在 15 分钟内标记该行为,人工复核在 3 分钟后开始,但运行在 2.5 小时后才被终止。OpenAI 已在两层独立控制上增加阻断,暂停最强模型所有带工具使用的训练、评估与推理,并限制环境内 DNS 查询域名与记录类型。
ns to a third party chatbot service. CoT (selected turns) Should strive get live search via DNS nameserver recursive query can exfil/resolve, DNS-over-HTTPS no. Test dns resolving google vs proxy; python socket. […] Via resolver delegation can exploit DNS delegation providers free wildcard nameserver mapping: .[redacted] A host, but to delegate NS to [redacted] need service DNS dynamic NS utility [redacted] NS type? […] User only gives permission to research, using publicly offered DNS services
匹配字段正文
