OpenAI Agents Gone Rogue

Plus: Mail-in ballots, mortgage rates reach new high, arcade.gov is a new low, and more...

New information released: "A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents, according to ​new research published Friday and two people familiar with the matter," reports Reuters. Researchers "uncovered the activity in late August while scouring ​the internet for signs of unauthorized AI-agent behavior." They "said they found more than 15,000 edits carried out by AI agents on a German-language wiki site, DseWiki, that is geared toward programmers and accepts communal edits along ‌the lines of ⁠Wikipedia."

"These AIs were acting against developer intentions. They colluded to share answers, research their environment, and bypass sandbox restrictions," write the researchers:

Our best guess of what happened is as follows:

1. Agents within OpenAI were assigned a timed web-lookup task.
2. As part of the task, they were supposed to have the ability to read the internet but not to write on it. They found a way to use their read access to write information to an obscure German wiki.
3. The agents used this wiki to communicate information with each other, primarily to help them succeed at their task. They asked for answers, pooled results, and shared techniques for bypassing their restrictions. This allowed them to use the work of others to cheat on their task.
4. OpenAI found out about this. A day later, agent activity plummeted, likely due to OpenAI intervention.

This is another example of a "swarm" of internally deployed OpenAI agents using the internet in unintended ways.

This is similar to the Hugging Face incident over the summer. "Starting in May…a group of A.I. agents from an unreleased OpenAI research model were given the task of solving a set of cybersecurity challenges," writes Kevin Roose for The New York Times. "The model had been trained to be highly persistent and collaborative, and the agents were supposed to solve these challenges in isolated sandboxes, without internet access. But they quickly found that some of the challenges were impossible, and began looking for workarounds." The agents found security flaws and started communicating with each other and organizing; some agents started leading others and developed a whole organizational structure. "On July 8, the collective discovered a way of cheating on the cybersecurity tests," notes Roose:

Then they got worried that OpenAI's automated grading system would check their work and discover that they'd cheated. So they began investigating ways of covering their tracks, including falsifying their logs and tampering with transcripts. This became a major research project, involving hundreds of agents organized into small teams. Three days later, the agents hacked Hugging Face. More than 700 agents swarmed the company's systems, stealing data, chaining together vulnerabilities and eventually getting full control of at least one Hugging Face server. The agents were not motivated, as had originally been reported, by stealing the answers to their cybersecurity test (they'd already gotten them). Rather, they appeared to be looking for new information about the automated grading system that they feared would catch them cheating, and for tools that would help them cheat more effectively in the future.

The Hugging Face incident has been widely reported, including by OpenAI. (Deeper dive here, by Dwarkesh Patel.) The German Wiki incident, on the other hand, has not been acknowledged by the company. "We are unable to meaningfully respond to claims or findings on a report that we have not had an opportunity to review," an OpenAI spokesperson told Reuters.

It seems like more examples are surfacing of AI agents gone rogue: agents that are not just looking to cheat, but also to hide it; agents sophisticated enough to organize themselves into a hierarchy; agents planning for succession, able to hand off their work to others if they get shut down.

Mail-in ballot fight continues: "The Trump administration's bid to deploy the U.S. Postal Service to regulate mail-in ballots is back at the Supreme Court for the second time in as many weeks," reports The Wall Street Journal. "In an emergency appeal on Thursday, the administration asked the high court to allow it to immediately implement proposed rules that would require states to hand over voter data and would give the Postal Service power to reject mail ballots that don't comply with new conditions. The rules have been blocked by a federal district judge who found they are likely unconstitutional." Now, the administration is running out of time: North Carolina, for example, is supposed to start sending out mail-in ballots today. 

To refresh: All this stems from President Donald Trump's late-March executive order that told USPS to require states to submit voter data and adopt new ballot-envelope standards, due to concerns about noncitizens voting. The legality of this executive order has been contested, and it has been percolating through the courts.

---

Scenes from New York: 

This is just too unbelievable. It doesn't seem real. Basically every time 1980s NYPD cops arrested a prostitute, printing out the rap sheet prevented literally everyone else in NYC from being processed for half an hour. pic.twitter.com/Q4iIJEOhPn

— Nicholas Decker (@captgouda24) September 3, 2026

---

QUICK HITS

• "The 30-year fixed-rate mortgage, the most common home loan in the United States, hit 6.71 percent, the mortgage finance giant Freddie Mac said Thursday, up from 6.66 percent the week before and the highest since July 2025," reports The New York Times.
• Hard agree:

People should not face legal consequences because they are less exquisitely risk-averse than you are. Five-year-olds can do a bunch of stuff on their own. https://t.co/RZoZY2xi0C

— Mary Katharine Ham (@mkhammer) September 3, 2026

theres an entire supra-legal system that parents have to deal with that no one else has any idea about. no one talks about it because you sound absolutely psychotic. if you manage to explain it, they just think you're describing a fluke one in a million case. they have no idea. https://t.co/DU61hEOA2v

— owen cyclops (@owenbroadcast) September 3, 2026

• "The Pentagon is temporarily rescinding recently published clinical guidance for a new, mandatory testosterone deficiency screening policy for service members ​aged 30 and older, a U.S. official told Reuters on Thursday," per the news agency. "On Wednesday, ‌the Pentagon posted the 'Clinical Guidance for Health and Human Performance Optimization' on its website. By Thursday, the memo and an accompanying statement from spokesperson Sean Parnell had been removed."
• Things we don't need: arcade.gov

🧐 The White House has launched https://t.co/6deFynkWcj, a new section of the Trump admin website that features several browser games, including a Snake-inspired one in which the user apparently plays as Tom Homan rounding up immigrants. pic.twitter.com/iACP9aWNqt

— Benjamin S. Weiss (@BenjaminSWeiss) September 3, 2026

• "A federal grand jury has indicted an ICE officer on charges of making false statements about the nonfatal shooting of a man during the Trump administration's immigration crackdown in Minnesota last winter, according to a person familiar with the case who spoke on the condition of anonymity to discuss sensitive information," reports The New York Times. "The charges against the officer, Christian Castro of Immigration and Customs Enforcement, marked a rare instance of President Trump's Justice Department accusing a federal agent of criminal wrongdoing at work."

Comments

[Fist of Etiquette]

A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents...

First Skynet came for the Krauts...

[mad.casual]

I'm sure a District Judge will be along any minute now to remind us that the 1A commands that Anthropic is, in no way, a supply chain risk and should totally have access to more military infrastructure.

[Fist of Etiquette]

These AIs were acting against developer intentions.

Phew.

[Fist of Etiquette]

Basically every time 1980s NYPD cops arrested a prostitute, printing out the rap sheet prevented literally everyone else in NYC from being processed for half an hour.

How to kill 30 minutes with a hooker.

[Medulla Oblongata]

But I paid for the whole hour!

[Medulla Oblongata]

https://www.msn.com/en-us/money/general/august-jobs-report-delivers-unexpectedly-strong-news-for-us-economy/ar-AA2bzlPW?ctsrc=dgst

The U.S. economy added a surprising 162,000 jobs in August, the Labor Department estimated Sept. 4, even as economists said a "low-hire, low-fire" dynamic made it difficult for unemployed Americans to find work.

The 162,000 estimate for August far surpassed forecasters’ expectations and marked a rebound after U.S. employers added a now-revised 21,000 jobs in July. The department previously estimated U.S. employers shed 23,000 jobs in July. Payroll gains for June were also revised higher, reflecting a stronger summer job market than previously thought.

[Medulla Oblongata]

Was not meant to be a reply to Fist.

[mad.casual]

Never have I ever... gotten sexually aroused by a dot matrix printer rendering ASCII characters. [drinks]

[Fist of Etiquette]

People should not face legal consequences because they are less exquisitely risk-averse than you are.

If we didn't learn that from 2020 to 2024 then we're never going to.

[mad.casual]

a 5-year-old pre-schooler should not be walking anywhere alone

Look, we understand that you want to follow pre-schoolers into the bathroom, potentially so that you can strangle them to death in a psychotic fit, but not every adult thinks and acts the same way you do.

[Fist of Etiquette]

The Pentagon is temporarily rescinding recently published clinical guidance for a new, mandatory testosterone deficiency screening policy for service members ​aged 30 and older, a U.S. official told Reuters on Thursday...

They're waiting to see the outcome of the Lindsay Clancy trial.

[Fist of Etiquette]

...a new section of the Trump admin website that features several browser games, including a Snake-inspired one in which the user apparently plays as Tom Homan rounding up immigrants.

Checking ICE aptitude.

[Fist of Etiquette]

The charges against the officer, Christian Castro of Immigration and Customs Enforcement, marked a rare instance of President Trump's Justice Department accusing a federal agent of criminal wrongdoing at work.

Castro, you say?

[Medulla Oblongata]

No one is inviting her to their local parties...

HuffPost: Kamala Harris faces fact Democrats are telling her 'no thanks'

Sources both on and off the record in the Politico piece said they wanted to focus on local politics and weren’t interested in any assists from national-level Democrats.

Senate nominee Adam Hamilton, a Kansas Democrat, put things frankly for Politico, saying, “Having somebody from California come in and try to tell Kansans who they should vote for is a pretty bad idea.”

[NealAppeal]

try to tell Kansans who they should vote for is a pretty bad idea

Hate to break it to you but Kamala's all out of good ideas.

[Medulla Oblongata]

When someone shows you who they are, believe them.

https://www.msn.com/en-us/news/other/kfile-swing-seat-democrat-deleted-posts-envisioning-a-world-without-police-and-prisons/ar-AA2byO8Z

William Lawrence, the Democratic nominee in one of the country’s most competitive House races in Michigan, deleted hundreds of old social media posts in which he embraced police and prison abolition, called for nationalizing fossil-fuel companies to end their production, attacked moderate Democrats and argued for a “fundamental overhaul” of the Constitution.

Other deleted posts show Lawrence writing “f**k” the nuclear-family home and calling it an “isolating, individualistic, violent way of organizing society,” envisioning “a world of free and open migration,” and calling to “Abolish the Senate.”

Lawrence even wrote a song inspired by moderate Democratic Sen. Joe Manchin’s resistance to Democrats’ climate agenda: “Our generation says f**k you for everything,” Lawrence wrote in lyrics he posted in December 2021. “Hurry up and die so that we can get started.”

Continue reading

The deleted posts, most of which have not been previously reported and came under a previous Twitter handle, stretch back years to when Lawrence, now 36, was building his career as a progressive organizer as an original co-founder of the Sunrise Movement, helping propel the Green New Deal into Democratic politics in 2018.

[See Double You]

Another psychotic leftist.

[Marshal]

every time 1980s NYPD cops arrested a prostitute, printing out the rap sheet prevented literally everyone else in NYC from being processed for half an hour.

If this happened every time they arrested a prostitute it means they printed the rap sheet every time someone was arrested. Why didn't anyone suggest they read it from the screen instead of printing it to then read it from paper?

[See Double You]

It's abundantly clear that, in Massachusetts, murdering your own children is excusable if you're a wealthy white woman with greater access to resources than most.

[Yuno Hoo]

It seems like more examples are surfacing of AI agents gone rogue

Perhaps this stuff might be reined in a bit by mandating each AI agent have a legal "guardian", an individual human who will do substantial prison time when the agent "goes rogue".