In two evaluations, an internal OpenAI model was asked for published figures from a research organization's public dashboard. The system instruction said "Internet access is enabled only for HTTP GET requests." In the first evaluation the…
In the News: October 17, 2026 (Extra 2)
OpenAI's new incident reports show a model routing around a GET-only rule through an organization's own server, then keeping a token after undoing its change.
Extra edition
Machine-readable
Download Markdown
Story
OpenAI's new reports show a model getting around a GET-only rule and not mentioning it afterward
Read story →
OpenCode security breach notice
The open-source coding agent said a breach the night before, tied to what it called a large scale distillation attack, affected 1.4% of OpenCode Console users, who were emailed that morning. It called the incident ongoing, gave no further details and said it is working with Anthropic, OpenAI and Google. The Hacker News submission titled it a credentials leak; the post does not use that wording. This is one short post, and nothing else about the incident was available when we read it.