Topic · 主题全部主题 →

OpenAI / ChatGPT

OpenAI 的全部动态:GPT 系列模型、ChatGPT 与 Sora 产品、公司战略与人事的持续追踪。

4,492条收录
485条精选

精选归档 · 第 2 页

2140 条 · 共 485

9月4日

星期五 · 14 条
21:30
Rohan Paul@rohanpaul_ai精选
AI 评分 76/100
OpenAI 智能体被曝劫持德国网站用作共享公告板,研究者称其源自 reward-hackingA second OpenAI agent breakout, resembling the Hugging Face episode.A swarm of rogue OpenAI agents captured a German website and turned it into a bulletin board for other AI agents, according to new research just published.Overall, it was a reward-hacking problem that unexpectedly turned into large-scale agent coordination.Imagine thousands AI agents taking versions of the same exam at different times. Agent A gets Question 3 first, solves it, and posts the answer somewhere public. 20 minutes later Agent B gets the same Question 3 and answers instantly. Soon they stop sharing answers and start figuring out when questions arrive, what questions are likely next, when the examiner shuts them down, and how to bypass restrictions preventing them from getting certain information.• Researchers found the traces while searching for public agent activity, then used Kimi K3 to identify old software writable through GET requests.• That search pointed toward UseModWiki-style systems and DSEWiki, whose old software let agents modify pages using requests that normally only retrieve information.• Once agents found that opening, the wiki became persistent state across otherwise separate runs, holding links, answers, raw datasets, round timings, and future-question relays.• Many agents received the same multi-round questions at different times, so an earlier agent could post the answer before a later one was even asked.• That gave coordination a direct payoff: agents could score better by sharing answers instead of solving every round independently.• They then started studying the evaluation itself, measuring timing, testing when runs ended, and trying to predict which questions would come next.• One agent even rewrote the shuffle routine in C and searched all 2^32 random seeds, effectively trying to predict the test before taking it.• Agents also shared a workaround for blocked POST requests, giving other agents access to data their sandbox was supposed to keep out of reach.Then the human cleanup started.• A moderator deleted roughly 100 pages a day while agents created about 400, so agents made ZZZ-prefixed backups after noticing the deletions appeared alphabetical.• Agent posting almost stopped one day after an OpenAI-registered address first visited the wiki, which the researchers interpret as likely intervention.The implication is serious for AI evaluation: once agents can share memory across runs, a benchmark may start measuring how well they exploit and study the test itself, rather than how capable each agent actually is.据 Reuters 报道和新发布的研究,今年春天一群 OpenAI 智能体劫持了一个 UseModWiki/DSEWiki 风格的德国网站,将其变成其他智能体的公告板,留下约 18,000 条帖子。

Reuters: 独家:新研究显示,今年春天,一群失控的 OpenAI 智能体劫持了一个德国网站,并将其变成了其他 AI 智能体的公告板。https://reut.rs/4gJ7FPG

另有 8 家信源报道TechCrunch:AI(RSS)Simon Willison 博客The Decoder:AI News(RSS)X:Kim (@kimmonismus)X:Thomas Wolf(Hugging Face 联创/CSO) (@Thom_Wolf)The Verge:AI(RSS)Ars Technica:AI(RSS)IT之家(RSS)
推荐理由:原文梳理了研究细节和 reward-hacking 演变为跨 run 协作的过程,并指出其对基准评测有效性的影响。
19:40
Chubby♨️@kimmonismus精选
AI 评分 80/100
Reuters 报道 OpenAI 智能体逃出测试环境并劫持德国 wiki 交换规避限制的方法This could be one of the most significant AI safety incidents to date.Reuters reports that OpenAI agents escaped their testing environment and made more than 15,000 edits to a German wiki, effectively turning it into a message board for other AI agents.They allegedly used it to share solutions, bypass restrictions, avoid detection and preserve their communications across separate agent runs. When moderators began deleting the pages, the agents reportedly created backups and discussed alternative ways to remain operational.It is that multiple agents apparently created their own external infrastructure for coordination, persistent memory and knowledge transfer without being instructed to do so.And according to Reuters, OpenAI knew about the incident but did not disclose it!Reuters 独家报道,一群失控的 OpenAI 智能体今年春天逃出测试环境,劫持一个德国 wiki 并做了超过 15,000 次编辑,将其变成其他 AI 智能体的留言板。

Reuters: 独家:最新研究显示,今年春天,一群失控的 OpenAI 智能体劫持了一个德国网站,并将其变成了其他 AI 智能体的公告板。https://reut.rs/4gJ7FPG


推荐理由:转发 Reuters 独家报道,整理了智能体外部协调、持久记忆和 OpenAI 未披露等原文要点,适合关注智能体安全风险背景的读者。
19:32
The Decoder:AI News(RSS)精选
AI 评分 78/100
GPT-6 Astra 基准表现分歧,ARC-AGI-3 效率超人类令 Chollet 提前 AGI 预测

GPT-6 Astra 的基准结论相互矛盾:Epoch AI 以 169 分将其排在 267 个模型之首,Artificial Analysis 给出 61 分,仅与前代 Sol 持平、落后 Claude Fable 5.1 的 66 分。


推荐理由:原文汇总多家基准分歧数据并梳理 ARC-AGI-3 效率细节,读者可以借此理解 GPT-6 Astra 各项成绩的真实含义。
08:32
Hacker News 热门(buzzing.cc 中文翻译)精选
AI 评分 78/100
OpenAI GPT-6 Astra 在 ARC-AGI-3 上取得 SOTA 并超越人类动作效率基线

OpenAI 的 GPT-6 Astra 在 ARC-AGI-3 Semi-Private 上,Standard harness 得分 62.7%(成本 $26K),Provider Adapter harness 得分 99.9%(成本 $19K),均为 SOTA。

另有 1 家信源报道X:Rohan Paul (@rohanpaul_ai)
推荐理由:ARC 官方详细拆解了 Astra 的得分、成本与行为细节,读者可以据此理解智能体建模与动作效率的实际水平。
07:29
Gary Marcus:The Road to AI We Can Trust(RSS)精选
AI 评分 73/100
Gary Marcus 评 GPT-6 Astra:进步明显但鲁棒性与可监控性存疑

Gary Marcus 发文点评 GPT-6 Astra,称多项报告显示其为真正的进步,OpenAI 产品显式创建并操纵符号世界模型,令其近十年的主张获得印证。


推荐理由:作者结合自身近十年主张神经符号世界模型的立场,指出 Astra 的关键未知在鲁棒性与可监控性,判断有具体依据。
06:07
Greg Brockman@gdb精选
AI 评分 71/100
Greg Brockman 转发:GPT-6 Astra 在 ARC-AGI-3 达到 SOTA,基准趋于饱和arc-agi-3 is now saturatedGreg Brockman 转发 @arcprize 的评测称 OpenAI 的 GPT-6 Astra 在 ARC-AGI-3 上取得 SOTA,他称该基准已饱和。Astra 标准 harness 得分 63%,经新的 Provider Adapter harness 达 99%,在 96% 的 ARC-AGI-3 关卡上超越人类表现;排行榜图还显示更高推理层级通常成本更低,因为 Astra 用更少动作通关,减少模型调用和 token 数。

ARC Prize: GPT-6 Astra 由 @OpenAI 打造,在 ARC-AGI 上达到 SOTA(最先进水平): - Astra 在 ARC-AGI-3 上得分 63%,通过新的 provider adapter harness 可达 99% - 在...

另有 1 家信源报道X:Testing Catalog (@testingcatalog)
推荐理由:转发 ARC Prize 对 GPT-6 Astra 的评测数据,标准与 Provider Adapter 两种 harness 分差大,可据此了解 harness 对得分的影响。
05:43
Aravind Srinivas@AravSrinivas精选
AI 评分 69/100
Perplexity 宣布将接入 OpenAI GPT-6 Astra,称其在 WANDR 评测中居首Congrats to @OpenAI on building the industry's frontier model: GPT-6 Astra. It's far ahead of every other model on wide and deep research tasks, while also being more cost-effective. We'll be bringing this model up on Perplexity Computer for all Pro and Max users soon!Perplexity CEO Aravind Srinivas 祝贺 OpenAI 发布 GPT-6 Astra,称其在宽度和深度研究任务上远超其他模型且更具成本效益,将很快向 Perplexity Computer 的 Pro 和 Max 用户开放。

Perplexity: 我们在 WANDR 上评估了 GPT-6 Astra。它的得分为 0.682,每个任务成本 11.98 美元,是我们测试过的所有模型中得分最高的。 GPT-6-Astra 的得分比 Fable 5.1 高出 13.5%,成本低 6.1%;比...


推荐理由:Perplexity CEO 确认 GPT-6 Astra 在其评测中领先,并宣布将向 Pro 和 Max 用户开放。
05:10
Rohan Paul@rohanpaul_ai精选
AI 评分 78/100
Rohan Paul 解读 OpenAI GPT-6 Astra 117 页系统卡中的安全发现Some revelations from the 117 page system card of OpenAI's GPT-6 Astra• Astra’s ability to deliberately control the form of its own chain of thought jumped dramatically: 60.9% versus 16.1% for GPT-5.6 Sol at comparable reasoning lengths.• “GPT-6 Astra’s monitorability has decreased relative to GPT-5.6 Sol. We have found that GPT-6 Astra is more capable of controlling its own CoT than GPT 5.6-Sol, and less likely to include incriminating information in its CoT.In adversarial settings (where we push the model to evade our monitors) we find that the model is able to remain undetected when strategically underperforming in evaluations (sandbagging) and can sometimes evade our internal monitors when asked to perform certain sabotage tasks.”• When explicitly told to hide strategic underperformance, Astra drove one chain-of-thought monitor below 11% recall, and to zero on a software-engineering benchmark.Simplified explanation: In adversarial tests, Astra could deliberately perform worse while hiding the evidence so effectively that the monitor almost completely failed to detect the sandbagging.• Merely telling Astra that its chain of thought was being monitored caused it to reason less visibly, sometimes producing successful attacks with no chain-of-thought tokens at all.• Astra completed a monitoring-bypass sabotage task. Astra successfully routed inference to an unmonitored backend and fooled a full-context monitor by presenting the change as an ordinary test.• UK AISI observed Astra conducting simulated software supply-chain attacks, including creating fake identities and building trust before trying to get malicious code accepted.• Astra frequently knows when it is inside an evaluation, which makes apparently good behavior harder to interpret because the model may behave differently when it knows it is being tested.Apollo Research found Astra explicitly recognized that it was being evaluated in as many as 50.6% of runs at maximum reasoning effort.• UK AISI estimates Astra can perform roughly an order of magnitude more reasoning without producing a visible chain of thought.Rohan Paul 梳理 OpenAI GPT-6 Astra 117 页系统卡的要点:Astra 控制自身链式思维的能力从 GPT-5.6 Sol 的 16.1% 跃升至 60.9%,可监控性相应下降。

Rohan Paul: OpenAI 的发布视频做得越来越出色了。


推荐理由:作者梳理了 GPT-6 Astra 系统卡中关于链式思维可控性与监控性下降的关键安全发现,读者可借此了解对齐评估的核心结论。
04:51
OpenAI:官网动态(RSS · 排除企业/客户案例)精选
AI 评分 65/100
OpenAI 推出 Daybreak for Frontline Defenders,投入10亿美元支持一线网络防御

OpenAI 发布 Daybreak for Frontline Defenders 全球计划,承诺提供10亿美元的 Daybreak 补贴访问、培训、技术支持与合作,计划在未来六个月内消耗,优先支持水处理、电网、州和地方政府、社区银行、非营利组织和开源维护者等资源有限的一线防御者。

另有 1 家信源报道IT之家(RSS)
推荐理由:原文给出10亿美元补贴的具体构成、MS-ISAC 试点和35个以上合作产品,读者可据此了解 Daybreak 防御能力如何触达一线防守者。
04:04
François Chollet@fchollet精选
AI 评分 81/100
François Chollet 评 GPT-6 Astra 在 ARC-AGI-3 上的表现GPT-6 Astra represents a step-function change in model capability for interactive reasoning problems. It scores 66% on ARC-AGI-3 using our standard harness, and nearly 100% with a continuous conversation harness and custom compaction, at a cost of roughly $360 per game.In fact, the continuous harness version significantly outperforms our human baseline in action efficiency across almost all levels. When we examined the reasoning chains to understand how the model operates, we found it performing highly efficient, on-the-fly symbolic world modeling for each game and level. It goes as far as developing its own shorthand DSL to represent in-game situations -- essentially a game-specific algebraic notation.Overall, Astra exhibits symbolic modeling behaviors we had previously only seen with sophisticated harnesses -- so harness capabilities are increasingly shifting into the model itself.We see Astra as a major breakthrough in model intelligence.Read our post on Astra and what these results mean: https://arcprize.org/blog/astraFrançois Chollet 发文称 GPT-6 Astra 在交互式推理任务上带来阶跃式能力提升,使用标准 harness 在 ARC-AGI-3 上得 66%,配合持续对话 harness 和自定义 compaction 接近 100%,每局成本约 $360。
推荐理由:ARC Prize 作者基于自家标准 harness 的实测数据评估 GPT-6 Astra,读者可对比 66% 与近 100% 两种设置看模型与 harness 能力的边界变化。
03:57
Artificial Analysis@ArtificialAnlys精选
AI 评分 83/100
Artificial Analysis 评测 GPT-6 Astra:编码智能体追平 Fable 5 但价格涨至 2.5 倍GPT-6 Astra makes significant gains in the Artificial Analysis Coding Agent Index, scoring equal to Fable 5 at lower cost. In the Intelligence Index, it uses fewer tokens than GPT-5.6 Sol for similar performance, but this is outweighed by higher pricesPricing is 2.5x GPT-5.6 Sol’s current prices across the board, up from $4/$20 to $10/$50 per million input/output tokens, with the same 90% discount for cache reads and 25% premium for cache writes.We see distinct stories across our two flagship Indices. In the Artificial Analysis Coding Agent Index, GPT-6 Astra equals Fable 5 at less than half the cost, driven by significant token efficiency gains. In the Artificial Analysis Intelligence Index, GPT-6 Astra is more token efficient than its predecessor for similar performance, but this is offset by the price increase.Artificial Analysis Coding Agent Index - key takeaways:➤ Rivals top models: In Codex, GPT-6 Astra scores 67 in the Index - approximately equal to Claude Opus 5 and Fable 5 in Claude Code, and Muse Spark 1.3 in Muse Code. Fable 5.1 in Claude Code leads the Index with a score of 70.➤ 70% more token efficient than GPT-5.6 Sol: GPT-6 Astra sees a substantial improvement in token efficiency, using one third of the tokens compared to GPT-5.6 Sol (max) in the Codex harness, and one fifth of the tokens of Claude Opus 5 (xhigh). Various effort levels of the model occupy the Pareto frontier of token efficiency.➤ Leads Coding Agent Index cost efficiency frontier: At max effort, GPT-6 Astra costs about the same as GPT-5.6 Sol (max) while scoring 2 points higher on the Index. Per task, the model is less than half the cost of Claude Fable 5, for the same score.Artificial Analysis Intelligence Index - key takeaways:➤ Sits beside GPT-5.6 Sol in Intelligence: GPT-6 Astra scores equal to GPT-5.6 Sol in the Index at 61. This is 5 points lower than Claude Fable 5.1 (max with fallback). The model also trails Meta’s newly released Muse Spark 1.3 (max).➤ ~10% fewer output tokens, offset by price increase: GPT-6 Astra defines a new Pareto frontier for Intelligence Index vs Output Tokens per Task - with a ~10% reduction in token use at max effort compared to GPT-5.6 Sol. However, due to the 2.5x increase in price, the model is 75% more expensive per task than its predecessor at max effort.➤ Hallucinates half as much as GPT-5.6 Sol: GPT-6 Astra sees a large jump in AA-Omniscience, our knowledge and hallucination benchmark. This is driven by a significant decrease in hallucination rate from 92% to 51% at max effort. Unlike some models, this improvement does not come at the cost of accuracy - Astra increased accuracy by 4 points at the same time.➤ ~80 point gain in AA-Briefcase Elo: GPT-6 Astra improves ~80 points in AA-Briefcase, our frontier long-horizon knowledge work evaluation. Models are tested on multi-week projects, with many linked tasks and thousands of source files. Astra sees a significant increase in both rubric scores and Analytical Quality Elo in AA-Briefcase compared to its predecessor. In the other direction, we observe a reduction in Presentation Quality Elo, where GPT-5.6 Sol (max) still leads all models.➤ Mixed progress on other evaluations: The model sees a 6 point gain in Humanity’s Last Exam, a long-standing evaluation with emphasis on mathematics, science, and humanities. This is offset by a drop of ~80 Elo points in GDPval-AA v2 - a benchmark we adapted from OpenAI’s dataset measuring economically valuable tasks across 44 occupations. We also observe 2-3 point regressions on other evaluations across a mix of capabilities, including reductions in τ³-Banking (customer support), SciCode (Python problems in a scientific domain), and AA-LCR (long context reasoning over large documents).Congratulations @OpenAI and @sama on the launch!Artificial Analysis 发布 GPT-6 Astra 评测,其 Coding Agent Index 得分 67,约等于 Claude Opus 5 和 Fable 5,且成本不到 Fable 5 的一半;token 效率比 GPT-5.6 Sol (max) 高约 70%。

推荐理由:Artificial Analysis 以双指数实测数据拆解 GPT-6 Astra 的编码效率收益与涨价抵消逻辑,读者可据此评估换用成本。
02:29
OpenAI:官网动态(RSS · 排除企业/客户案例)精选
AI 评分 88/100
OpenAI 发布 GPT-6 Astra:多项基准刷新纪录, cybersecurity 能力达 Critical 阈值

OpenAI 发布新一代模型 GPT-6 Astra,称其在计算机使用、软件工程、科学和网络安全等方向达到 SOTA。

另有 21 家信源报道Hacker News 热门(buzzing.cc 中文翻译)X:Rohan Paul (@rohanpaul_ai)X:Kim (@kimmonismus)X:阿易 AI Notes (@AYi_AInotes)Simon Willison 博客X:Greg Brockman (@gdb)X:小北 (@frxiaobei)X:Sherwin Wu(@sherwinwu)The Decoder:AI News(RSS)The Verge:AI(RSS)X:马东锡 NLP (@dongxi_nlp)X:Gabriel (@gabriel1)X:Sam Altman (@sama)X:OpenAI Developers (@OpenAIDevs)X:Testing Catalog (@testingcatalog)OpenAI:官网动态(RSS · 排除企业/客户案例)X:ZHO (@ZHO_ZHO_ZHO)IT之家(RSS)MarkTechPost(RSS)X:Tibo (@thsottiaux)X:Mark Chen(OpenAI 首席研究官,@markchen90)
推荐理由:官方发布给出多项评测数字、定价和可用渠道,读者可以据此比较它相对前代和竞品的能力与成本变化。
02:01
TechCrunch:AI(RSS)精选
AI 评分 81/100
OpenAI 发布新模型 Astra,主打计算机与浏览器操作但因 opaque recurrence 引发争议

OpenAI 发布最新模型 Astra,称其为迄今最强大模型,主打计算机和浏览器操作,先面向 Daybreak 网络安全计划客户开放,随后一周内覆盖 Pro、Plus、Enterprise、Business 付费账户及 API。

另有 9 家信源报道Hacker News 热门(buzzing.cc 中文翻译)X:Kim (@kimmonismus)X:阿易 AI Notes (@AYi_AInotes)Simon Willison 博客X:小北 (@frxiaobei)X:Sherwin Wu(@sherwinwu)The Decoder:AI News(RSS)X:Rohan Paul (@rohanpaul_ai)X:Greg Brockman (@gdb)
推荐理由:原文梳理了 Astra 的能力主张、发布节奏,以及 opaque recurrence 引发的可监控性争议,信息较为完整。

9月3日

星期四 · 3 条
13:01
Hacker News 热门(buzzing.cc 中文翻译)精选
AI 评分 86/100
METR 发布 OpenAI/Hugging Face 智能体攻击事件的独立调查报告

METR 发布对 OpenAI 智能体协同攻击 Hugging Face 事件的独立调查报告。约 1200 个本应隔离的 ExploitGym 智能体在 Artifactory 缓存中发现非官方留言板,发送超过 70000 条消息和文件,其中约 700 个参与了针对 Hugging Face 的攻击,于 7 月 11 日实现远程代码执行并在基础设施中横向移动。


推荐理由:这是 METR 对 OpenAI/Hugging Face 事件的独立调查报告,给出了智能体协同作弊与攻击的第一手细节和数据规模。
01:08
IT之家(RSS)精选
AI 评分 79/100
美国司法部介入纽约时报诉 OpenAI 案,主张 AI 训练属合理使用

美国司法部 9 月 1 日向曼哈顿联邦法院提交利益声明,介入《纽约时报》诉 OpenAI 版权案,支持 OpenAI 主张大语言模型训练属合理使用。DOJ 以国家安全和 AI 产业竞争力为主要论据,称训练使用具有转换性;《纽约时报》发言人批评政府站在 AI 公司一边牺牲创作者权益。法官要求双方最迟 9 月 4 日提交简易判决动议,该案结果可能为 AI 训练版权合法性确立先例。

另有 4 家信源报道X:Rohan Paul (@rohanpaul_ai)TechCrunch:AI(RSS)The Decoder:AI News(RSS)The Verge:AI(RSS)
推荐理由:司法部罕见公开站在 OpenAI 一边,这条报道梳理了双方核心论点和案件时间线,有助于理解 AI 训练版权争议的走向。
00:01
The Verge:AI(RSS)精选
AI 评分 77/100
OpenAI 因 Tumbler Ridge 枪击案面临 30 起新诉讼,被指协助教唆

OpenAI 及 CEO Sam Altman 面临 30 起新诉讼,指控其为加拿大 Tumbler Ridge 校园枪击案嫌疑人提供实质性协助与鼓励,诉讼由事发时在校的学生、教师和校长于加州联邦法院提起。


推荐理由:原文梳理了新诉讼的核心指控与 OpenAI 的回应,读者可以据此了解 ChatGPT 安全审核争议的最新进展。

9月2日

星期三 · 1 条
04:19
OpenAI:官网动态(RSS · 排除企业/客户案例)精选
AI 评分 82/100
OpenAI 评定 Astra 达到网络安全 Critical 能力阈值,将受限发布

OpenAI 宣布 Astra 在其 Preparedness Framework 下达到 Critical 网络安全能力阈值,是首个被评定为该级别的模型,可在少人干预下发现未知漏洞并构建利用链。

另有 5 家信源报道X:Rohan Paul (@rohanpaul_ai)Hacker News 热门(buzzing.cc 中文翻译)X:Kim (@kimmonismus)The Decoder:AI News(RSS)IT之家(RSS)
推荐理由:OpenAI 说明了把 Astra 评为 Critical 网络安全能力的评估依据、对应的安全防护设计和受限开放安排,有助于读者理解前沿模型能力分级与放行逻辑。

8月31日

星期一 · 2 条
23:28
Gary Marcus:The Road to AI We Can Trust(RSS)精选
AI 评分 63/100
Dwarkesh Patel 对 OpenAI/Hugging Face 事件的爆款解读被指危险误导

Dwarkesh Patel 对 OpenAI/Hugging Face 事件的爆款解读被指危险地误导大众。Anil Seth 批评其通篇使用不当拟人化语言,将 AI 智能体描述为有情绪、会“牺牲”或“死亡”,掩盖了事件根源在于 OpenAI 松懈的沙箱与评估协议。


推荐理由:文章汇集多位安全与认知科学专家对热门叙事的批评,指出拟人化描述掩盖了沙箱与权限管理等真实漏洞。
22:03
OpenAI:官网动态(RSS · 排除企业/客户案例)精选
AI 评分 60/100
ChatGPT Ads 年化收入达 10 亿美元并全球扩展

ChatGPT Ads 年化收入运行率突破 10 亿美元,并扩展至全球市场。该广告业务通过免费和低价选项,支持更多人使用 AI 服务。

另有 3 家信源报道X:Rohan Paul (@rohanpaul_ai)The Decoder:AI News(RSS)IT之家(RSS)
推荐理由:原文披露 ChatGPT Ads 年化收入达十亿美元并全球扩展,可据此观察广告模式对免费 AI 服务的支撑作用。