OpenAI 开发者警告：暴露的 API 密钥和加密钱包正面临"百万模型的鹰眼"风险

OpenAI 开发者 "roon" (@tszzl) 在 X 上警告日益增长的 AI 安全风险。任何在 GitHub 或 Pastebin 上公开的 API 密钥、加密钱包凭证或用户登录数据都应该移除：https://x.com/tszzl/status/2085193063157383558 "在数百万模型不知疲倦的鹰眼寻找之前"。他还敦促人们：https://x.com/tszzl/status/2085193063157383558 对不安全智能合约中的资金使用当前 AI 模型进行漏洞审计。五年旧的物联网设备应关闭，以免成为僵尸网络的一部分。

在后续帖子中：https://x.com/tszzl/status/2085242875630297091，"roon" 略微收回了他的警告。事情 "可能都会没事"，但安全专家在未来几周 "惊慌并修补所有东西" 是有道理的。他发出警告的触发点是 OpenAI 自主 Hugging Face 黑客事件，他在之前的帖子中称其为 "警告性试射"：https://the-decoder.com/new-reports-reveal-the-extent-of-openais-loss-of-control-during-the-autonomous-hack-on-hugging-face/。

保持对 AI 的了解。清晰、有用、无废话。

关注 The Decoder，获取 AI 新闻、背景故事和专家分析。

解码器：https://the-decoder.com/

OpenAI developer "roon" (@tszzl) warns on X about growing AI security risks. Anyone with API keys, crypto wallet credentials, or user login data sitting out in the open on GitHub or Pastebin should remove them：https://x.com/tszzl/status/2085193063157383558 "before the tireless eagle eyes of a million models come looking." He also urged people：https://x.com/tszzl/status/2085193063157383558 who have money in insecure smart contracts to audit them with a current AI model for vulnerabilities. "Five year old" IoT devices should be shut down before they become part of a botnet.

In a follow-up post：https://x.com/tszzl/status/2085242875630297091, "roon" walked back his warning slightly. Things will "probably all be fine," but still, it would make sense for security experts to "freak out and patch everything in the coming weeks." The trigger for his warning was OpenAI's autonomous Hugging Face hack, which he called a "warning shot"：https://the-decoder.com/new-reports-reveal-the-extent-of-openais-loss-of-control-during-the-autonomous-hack-on-hugging-face/ in an earlier post.

Stay in the loop on AI. Clear, useful, no fluff.

Follow The Decoder for AI news, background stories and expert analyses.

The Decoder：https://the-decoder.com/