Support Guard Rail Now → https://www.every.org/guardrailnow
OpenAI says its AI agents, sealed in separate sandboxes with no network, passed secret messages through the timing of a computer's memory cache. John Sherman, Liron Shapira and Michael ask whether AI can be contained at all, and why AI models hiding messages in images matters. Plus: Black October, the month AI-found software flaws and a $6.3 billion crypto theft tested the internet's defenses, Anthropic's IPO filing, and Google's data center forest in Finland.
TIMESTAMPS – Warning Shots #64
0:00 – Cold open
0:27 – Welcome back
1:00 – This week's stories
1:20 – Is the internet breaking?
1:48 – Liron: "Black October"
3:50 – Michael: the broken-lock model
5:04 – The Polymarket hack
6:00 – The Binance hack
7:30 – How to protect yourself
11:29 – A family password
11:46 – Fortress America: 90 days
12:30 – Michael: the UK's Be Ready
13:52 – Liron: is this about AI hacking?
15:27 – Chaos before superintelligence?
16:07 – What comes after Black October?
17:08 – Liron: defending his own site
18:00 – Michael: 3% of critical bugs
19:08 – Secret chats between AI agents
19:54 – Michael: talking via the cache
21:57 – Liron: sandboxes leak
23:08 – Messages hidden in images
23:54 – Google's Finland forest
26:01 – Liron vs. the trees
26:50 – Anthropic's IPO payday
27:55 – Liron: reading the S-1
29:39 – Michael: incentives to race
32:17 – A transfer from the many?
36:00 – Boston Dynamics robot dogs
37:06 – Michael: one software update
39:02 – Doomsday prep: maps, a compass
40:11 – Solar panels and sign-off
WHAT THEY COVER
– OpenAI's report that red-team agents in isolated microVMs, with no network and no shared files, exchanged secrets through CPU cache timing, and why Michael calls containment an illusion
– New research in which an AI model hid messages in images that another lab's model could decode
– Black October: two critical PHP flaws found with AI help, a compromised monitoring script that drained Polymarket accounts, and a $6.3 billion theft from Binance hot wallets that began with one engineer's laptop
– Practical steps the hosts recommend: a password manager, two-factor authentication starting with your email, and a family password against voice and video impersonation
– Reports that major US military bases are planning to run 90 days on their own, and the UK's new advice to keep three days of supplies at home
– Anthropic's IPO filing, estimates of how many employees could become hundred-millionaires, and a debate over what that money does to incentives
– Google clearing about 250,000 trees in Finland for a data center before environmental assessments were done
– Boston Dynamics employees protesting the sale of Spot robots to a federal agency
ABOUT THE HOSTS
John Sherman hosts For Humanity and leads Guard Rail Now, working to make AI extinction risk a normal conversation rather than a specialist one.
Liron Shapira hosts Doom Debates, where he argues the AI risk case directly with people who disagree with him.
Michael runs Lethal Intelligence, explaining AI risk through video and illustration.
LINKS
Support our work → https://www.every.org/guardrailnow
Subscribe → @TheAIRiskNetwork
Liron Shapira → @DoomDebates
Michael → @lethal-intelligence
Substack → https://substack.com/@theairisknetwork
X → https://x.com/AIRiskNetwork
Instagram → https://www.instagram.com/theairisknetwork/
TikTok → https://www.tiktok.com/@the.airisknetwork
JOIN THE CONVERSATION
If AI agents can pass messages through shared hardware, what would it take to keep a powerful model contained? Tell us in the comments.
#AISafety #AIRisk #WarningShots #AIAgents #AIContainment #OpenAI #Cybersecurity #BlackOctober #ArtificialIntelligence
92