117 pointsby forthwall2 hours ago27 comments
  • simonw24 minutes ago
    These are not very smart spies:

    > A chatbot account tied to Alfozan’s spouse, which shared identifiers with his own account, submitted prompts between Sept. 24 and Sept. 30 about building, installing, obscuring, and remotely accessing a recording device, prosecutors said. Queries included how to “build a continuous audio recorder” and “encrypt the SD card,” prosecutors claimed. On Sept. 27 and 28, the account asked about the specific device that was later found, including its unique MAC address.

    • adamm25520 minutes ago
      Learning that every thought you’ve put into an LLM, is recorded and readily available for evidence is going to be interesting for a lot of people.
      • KellyCriterion5 minutes ago
        It starts far before that:

        Ive seen people going through Plaud.AI conversation to find "on day X person Y said Z to person W", just to get some amunition against them.

      • 10xDev5 minutes ago
        I think people have some awareness, but like search history they believe deleting will resolve that (it won't).
      • 13 minutes ago
        undefined
      • teiferer5 minutes ago
        Prepare to have that dug up 20 years in the future during some court proceedings.

        Or at the border where it is already routine to ask for social media accounts (especially foreign nationals) you might someday five the border agent your login.

      • EGreg6 minutes ago
        Ever since social media, I have always gamed out what would happen if this was ever saved on the backend and used against me in the future.

        It’s like thinking about edge cases in programming…

        Most people are totally not like that. And it does force you into some difficult choices.

    • janalsncm14 minutes ago
      You probably don’t hear about the smart ones.
    • solyin9 minutes ago
      Especially since you an just buy one, like Plaud and tape it to the underside of the desk, surreptitiously, instead of suspiciously accessing the back of the TV.
    • andai9 minutes ago
      Hey ChatGPT, how do I do opsec? (Asking for a friend)
    • ReptileMan15 minutes ago
      I am not sure whether it bodes well for humanity that the advice "If you want to break the law use local abliterated model or at least a Chinese one" actually has to be written down.
      • nilamo2 minutes ago
        Or, at the very, very least, use incognito mode on a computer you don't otherwise touch, such as at a library.
      • kalkin6 minutes ago
        Recall that multiple of the Chinese LLM providers got caught sending at least some of their queries to Claude. That would be a pretty funny way to get caught in turn doing something by the US government.
      • contingencies5 minutes ago
        The future is already here it's just not evenly distributed.
    • IncreasePosts10 minutes ago
      He should have just left a tape recorder running inside a briefcase that was "forgotten" in the conference room
    • United8576 minutes ago
      Also from the article:

      > An unattended bag found in the company’s offices contained Alfozan’s wallet and identification, as well as a recording device

      It’s almost like he wanted to be caught…

    • TZubiri18 minutes ago
      "OpenAI personnel found the device Sept. 30. It was plugged into a USB port on the back of a television in an executive conference room and had been concealed in toilet paper,"

      I wonder what the IQ of someone needs to be to think that covering it up with tp makes it less suspicious instead of more. And I also wonder what the hiring process was like to hire someone with that mental frame.

      • AaronAPU6 minutes ago
        Further evidence the hiring process is orthogonal to competence.
      • msdz14 minutes ago
        > And I also wonder what the hiring process was like to hire someone with that mental frame.

        Remember, this is only the company responsible for potentially building and aligning AGI. No need to be setting high expectations toward their sandboxing or hiring capabilities.

      • cm21879 minutes ago
        I also wonder what this guy was paid by those AI labs...
      • MisterMunchkin17 minutes ago
        Yeah he should have just stuck a post it note with the words “do not remove” and nobody would have noticed
        • natpalmer177612 minutes ago
          IT would have noticed next time they had to plug something into the TV. Whether they cared enough to figure out what it was is a different story.
    • ajross20 minutes ago
      Given that this is being described as an "executive conference room", it's more likely an attempt at insider trading than espionage. Decisions made in those rooms at OpenAI move markets (c.f. DRAM) for sure.
      • TZubiri15 minutes ago
        OpenAI is both a company that manages a lot of money and a lot of political power, that the target was an "executive conference room" gives no indication as to whether the motives were financial or political.

        What might tilt the bayesian balance in favour of political intent would be the nationality of the individual, state or religious sponsoring become hypotheses.

        • ajross5 minutes ago
          Honestly I think you can rule out "political" already, no? It's far easier to just bribe politicians for that kind of intelligence. My point was that they weren't stealing models, they wanted decisionmaking intel.
  • simonw19 minutes ago
    This guy previously worked at Meta from 2017 to 2022 on Data Infrastructure projects.

    I expect Meta are running an audit right now to figure out if he was involved in espionage back then as well.

    • talon86358 minutes ago
      Or maybe he’s reporting to meta?
  • throwa356262an hour ago
    Part of the evidence was his wife's chatgpt logs.

    Remember kids, uncle Sam can see anything you tell your AI and will use that against you.

    • godwinson__4-83 minutes ago
      > Remember kids, uncle Sam can see anything you tell your AI and will use that against you.

      Not just your AI.

      You could have stopped the sentence at "uncle Sam can see anything" and these days it's pretty much true. They will use all of it against you if they can. Unless you truly want to live off the grid, if the state takes a sufficient interest in you, expect everything you do to be seen.

      Uncle Sam tried to get MLK to kill himself by sending him letters alleging knowledge of an affair [1]. Getting some idiot's wife's chatgpt logs represents a fairly routine law enforcement action these days, and as such is really rather unremarkable. The State is always something of a terror. Really under most (if not all) conceptions, it necessarily has to be. The monopoly of force is a comfort until the Leviathan knocks on your door.

      [1] https://en.wikipedia.org/wiki/FBI-King_letter

    • netsharc21 minutes ago
      A service you delegate your thinking to (Brain-aaS?), which the provider can also instruct to report anything suspicious... What a world we have now.

      I wonder if the BaaS-providers monitor the accounts of decision makers. They could profit if they figure out what e.g. a central banker is going to decide. Or... if they're the ones deciding for him.

      Hah, you can even streamline that by having an AI agent that autonomously makes decisions based on insider info...

    • binlog38 minutes ago
      Man really switched to his wife’s account and thought no one would be able to track him there. Calling this amateur would be an insult to amateurs.
      • redox9933 minutes ago
        How does someone this dumb get hired at openai?
        • schiffern18 minutes ago

            >how does someone this dumb get hired
          
          Using AI to pass the interview of course! I wish I was joking...

          It's AI inbreeding all the way down.

        • ramraj0729 minutes ago
          Smart people can do dumb things. Their LinkedIn profile looks typical for an OpenAI engineer.

          We also don’t know if this person did it under duress.

          • robotnikman20 minutes ago
            >We also don’t know if this person did it under duress.

            He was a Saudi national, so that is a possibility

        • 10xDev27 minutes ago
          50% is looking and sounding the part, the other 50% is having a good university on your resume / good networking.
          • sdcfgy25 minutes ago
            Yeah that. After three bad experiences in a row they are no hire status.

            There’s plenty of better people out there who just aren’t interested in that sort of stuff.

        • browningstreet6 minutes ago
          I could def espionage better. Does that qualify me to work at OpenAI?
        • robotnikman22 minutes ago
          Probably went to a prestigious university or had connections.
        • 25 minutes ago
          undefined
        • catchnear432132 minutes ago
          You might want to have a seat first if you want this explained.
    • tcdent35 minutes ago
      > ... a chatbot account associated with Alfozan’s spouse (which shared multiple identifiers and attributes with Alfozan’s own chatbot account) submitted prompts between Sept. 24 and Sept. 30 related to building, customizing, installing, audio recording, testing, obfuscating, and remote accessing a device, including inquiries about “build[ing] a continuous audio recorder,” “customiz[ing] Wi-Fi . . . connectivity,” “improv[ing] audio and live listening,” and “encrypt[ing] the SD card,” among other things. The same chatbot account also submitted prompts specifically related to Recording Device 1, including its custom header and unique MAC address, between Sept. 27 and Sept. 28.

      The justice.gov article doesn't specifically say it was an OpenAI account, but I think, based on the fact that they have logs including MAC address of the device, that we could probably assume that. The alternative is that other chatbot account providers are collaborating.

      Regardless, doing a string search on a MAC address for a device you find inside your property doesn't strike me as an abuse of the data that is also your property.

      • schiffern30 minutes ago

          >submitted prompts... including its custom header and unique MAC
        
        Sounds more like he put the exact MAC address in a prompt somewhere while setting it up.
      • gip29 minutes ago
        Not the smartest engineer ever, that use case perfectly align with using a Chinese model! And anyway I have no idea how he was hoping not to be caught in the case the device would be discovered.
      • clear-octopus32 minutes ago
        [dead]
      • Barrin9227 minutes ago
        in addition to the whole crime thing, an 'openai engineer', apparently engineering lead according to his linkedin, having to ask chatgpt to tell him how to set up a recorder or how to encrypt a sd card is something. Truly the cream of the engineering crop at those top AI labs
    • ReptileMana minute ago
      I doubt it. Storage is expensive and costs add up. There are with great certainty many accounts that are marked as non-schmuck and have retain forever policy, but for the schmuck - I think that after year or two your Griffit/Fulgrim slash fiction will go down the drain. I am not sure how many petabytes per minute in logs openai and anthropic generate, but I would guess more than 1.
    • Aurornis32 minutes ago
      True of any cloud service. If you are involved in a criminal investigation, they can get access to your data.

      They can confiscate your computers, too.

      This person, of all people, would know this. He really thought he’d never get caught.

    • TZubiri14 minutes ago
      Uncle Sam? It's the same company, the 'spy' asked an OpenAI controlled product how to spy OpenAI, no state espionage or search warrants needed.
    • IncreasePosts15 minutes ago
      Presumably they already knew who it was, if they were able to look at his wife's chat logs
    • catchnear432133 minutes ago
      Uno reverse card - you can send Uncle Sam whatever you care to. No need to specify an address.
      • exe347 minutes ago
        I used to joke that the nsa should offer a paid service for no-setup backups. You just tell them what files you've lost, and they can send you a copy for a fee.
  • delichon2 hours ago

      Abdulrahman Alfozan, 35, a Saudi national, was arrested Friday and charged with using or attempting to use a device to intercept oral communications. 
    
    https://news.ycombinator.com/item?id=50078141
  • minimaxir2 hours ago
    > We used our models to understand the device and where it had come from

    Did OpenAI do a marketing bit in the middle of an espionage accusation?

    • frangonf2 minutes ago
      Does detective bench cancel out felony bench?
    • mrandish42 minutes ago
      > Did OpenAI do a marketing bit in the middle of an espionage accusation?

      Yes, they did. The people who felt it was totally normal to add that would no doubt be surprised how desperate and cheap it makes them look.

      • brrwind6 minutes ago
        This is a very weird take to me. They're demonstrating they're able to in-house this cybersecurity investigation, leading to the alleged perpetrator's arrest, and you think that makes them look "desperate and cheap?"
    • seydoran hour ago
      "looks like a microphone"

      "almost surely made in china"

    • KazaNLPan hour ago
      Funny. I'd bet on whatever model they used over whoever showed up from today's FBI.
    • m4rtinkan hour ago
      So it is some HDMI dongle & the model halucinated it into a spying device? ;-)
    • tamimio37 minutes ago
      They are applying the “turn troubles to opportunities” very well :)
    • xvxvx2 hours ago
      Yes. Yes they did. Which makes me question the honesty of their announcement.
      • orangecat2 hours ago
        Yes, the classic marketing ploy of making false reports to the FBI.
        • MisterMunchkin2 hours ago
          They were literally caught making false reports to a murder investigation
        • SpicyLemonZest2 hours ago
          It could be that the reports are accurate and the device simply wasn’t as sophisticated as the statement implies. You could if you wanted use an AI model to analyze a USB camera with device name “John_Doe_1”.
  • VBprogrammer9 minutes ago
    Thank god security at a company which...checks notes...has remote code execution on every developers laptop and access to practically unlimited secrets uploaded by its agents...is top notch.
  • Aboutplantsan hour ago
    He was just gathering training data
    • SoftTalker30 minutes ago
      I mean really what's the big deal? Gathering information from unsuspecting parties who aren't aware it's happening? He was just doing what his employer does.
  • int32_642 hours ago
    Between this and the Ledger implants I wonder if AI companies will have a supply chain risk in the future where their models get exfiltrated over 5G.

    Good time to start a company that builds giant Faraday cages over data centers.

    • pjc5025 minutes ago
      Model "distillation" lets one model be trained on the outputs of another without having to directly steal it. It will be subject to constant arms race.

      The alignment people would like you worry about the model exfiltrating itself, too.

      • IncreasePosts11 minutes ago
        This technique currently works because the architecture of the model is generally published and well known. But, that isn't necessarily going to be the case in the future. For example, if some new model type which is not a LLM is discovered which gets closer to AGI, just training an LLM on its outputs will not necessarily give you a competitive model
    • pianopatrick37 minutes ago
      Would be better to build the data centers under water than to build giant faraday cages.

      Free cooling, safe from missile attack, and safe from some types of electronic spying.

    • morkalork33 minutes ago
      I could've sworn I read about Palmer Lucky making comments on hardware coming from China with wiretap implants in the last few days. Funny coincidence eh?
    • iAMkenoughan hour ago
      From the makers of The Iron Dome, now introducing The Copper Dome
  • BeetleB29 minutes ago
    Chances are he'll escape back home before the trial:

    https://www.propublica.org/article/saudi-fugitives-accused-o...

  • vostrocityan hour ago
    How did they get that capture of Alfozan looking behind the TV? Does OpenAI install its own surveillance cameras behind TVs to prevent espionage?
    • vatsachak2 minutes ago
      So it was not AI agents catching the perp it was a camera?
    • Aboutplantsan hour ago
      I imagine they found the device and then planted a camera to catch whomever came back to get the original device
      • vostrocityan hour ago
        Free startup idea: Anti-espionage cameras for corporate offices. Put it behind TVs and plants etc. and it will notify the security team if it detects new objects.
        • paimapi22 minutes ago
          I'm sure employers will never use in-office surveillance monitoring for anything that resembles algorithmic labor management and exploitation

          Certainly they would be transparent and very ethical with something like that

    • JumpCrisscross30 minutes ago
      > How did they get that capture of Alfozan looking behind the TV?

      “OpenAI personnel found the device Sept. 3…On Oct. 5, the complaint says, Alfozan entered the conference room and appeared to look behind the television.”

      The image was captured after the bug was found.

    • binlogan hour ago
      A camera behind every TV in the office would be something…

      But no the boring answer is that after they found the device they left it in place and planted the camera to see who came looking for it.

      • vostrocityan hour ago
        That does make more sense. But if any company were to take surprising security measures, it should be the frontier labs.
  • seydoran hour ago
    > The employee was terminated.

    in this context, they should be more specific about how terminal s/he is

  • I_am_tiberiusan hour ago
    You got me. I ask the obvious question: What's the "sophisticated" device?
    • 0cf8612b2e1ean hour ago
      You can buy a voice recorder that will hold weeks of audio for tens of dollars.

      Back of a TV is a decent hiding place. Wonder how they found it -was it actively transmitting?

      • to11mtman hour ago
        Well, The Thing [0] could potentially show up on a probing sweep if you're careful.

        Unless you mean, it happened to be actively transmitting during a(n investigative) sweep.

        Still, raises some fun concepts. The sort of things where in this current level of technology you'd almost need to supercool a room for a sweep, blast various RF/sound/etc and look for anything that even remotely warms up, to detect (1) whether something detected something worth recording for later as well as (2) something that might be on the right wavelength/etc to trigger a send.

        [0] - https://en.wikipedia.org/wiki/The_Thing_(listening_device)

    • iAMkenoughan hour ago
      ESP32-S3

      I was making a joke, but it does look like they got their components from Seeed Studio based on photos.

      https://assets.sfstandard.com/image/994911177489/image_k101c...

      https://www.seeedstudio.com/XIAO-ESP32S3-Sense-p-5639.html

      • m4rtinkan hour ago
        SeedStudio is super nice - a lot of their gear is also popular in the MeshCore community (LoRa radios combined with ESP32 or NRF MCUs).
      • mrandish19 minutes ago
        [dead]
    • 2OEH8eoCRo0an hour ago
      Apple HomeView
  • qkaze1536 minutes ago
    Sounds like fair use to me! Information wants to be free, remember?
  • tamimio27 minutes ago
    Looking at the device pic in here https://sfstandard.com/2026/10/13/openai-engineer-arrested-a...

    It looks like it’s the (SeeedStudio XIAO ESP32S3 Sense w/ WiFi, BLE, OV2640, Mic) https://ca.robotshop.com/products/seeedstudio-xiao-esp32s3-s...

    Which is just an esp32s3 based device. I assume the word “sophisticated” in openAI report is just copy paste from device description.

  • Imnimoan hour ago
    I have seem some articles which reference allegations from court documents / complaint, but I haven't been able to find the primary source. Do we know if that's publicly available yet?
  • CamperBob28 minutes ago
    >OpenAI said it has no indication that Alfozan improperly accessed or took model weights, source code, or customer data

    Sounds like we know where their priorities lie, anyway.

  • nfw220 minutes ago
    > It was plugged into a USB port on the back of a television in an executive conference room and had been concealed in toilet paper

    ...uh what

  • catchnear432135 minutes ago
    seeedstudio getting some impressive pr here for those xiao boards.
  • _DeadFred_an hour ago
    In case you need to sweep your area a decent review of anti spy devices by project farm

    https://m.youtube.com/watch?v=1reman2waLs

  • charcircuitan hour ago
    Why make this public? Usually companies just silently terminate and pursue employees who do this.
    • simonw22 minutes ago
      Sounds to me like the feds got involved already, and they're definitely going to want to make a big noise about this as a national security thing:

      > “For us it is a matter of national security,” U.S. Attorney Craig Missakian said in a statement. [...]

      > The case is being prosecuted by the National Security, Cyber & Special Prosecutions Section of the U.S. attorney’s office for the Northern District of California.

      (But that was after OpenAI "referred the matter to the FBI")

      There's presumably a strong argument for making this stuff known internally, since you want other employees to a) be on the lookout for it and b) get scared into NOT doing it themselves because someone else got caught.

      If you tell your employees, the outside world is going to hear about it too.

    • gorgoileran hour ago
      A common example is if a journalist approaches you saying they had a tip off and are about to run a story. The journalist, being a good old fashioned balanced-reporting type, calls you and asks you for a comment. Rather than responding to add your side to their story, you just blast out a press release before the journalist can even publish.

      (Or maybe you spend two hours on the phone to them talking about all kinds of stuff while also scribbling a note to your PA saying “EMPLOYEE JOE BUG STORY LEAKED TO VALLEYWAG PUT OUT COUNTER PR GET AGEAD OF STORY” and hoping they get a tweet out before the valleywag gumshoe gets off the phone.)

      (Or maybe you keep a notion.so page pre-filled with all your secrets and each one has a burn button next to it, ready for you to tap when ValleyWag call up for a comment on their upcoming exposé on PR/Disasters/20206090500039.md)

    • binlogan hour ago
      Hard to keep a DoJ/FBI investigation under wraps
    • TZubiri12 minutes ago
      I don't think criminal charges can be private
    • augment_mean hour ago
      IPO remember? Our information is so valuable we have foreign actors trying to steal it. Our model is so good it managed to figure out what this recording device was.
    • gizmodo59an hour ago
      court records? you can't hide them
    • testfrequencyan hour ago
      I’ve been wondering the same.

      This isn’t uncommon, but it’s rare this info is shared in such detail publicly..possibly to make an example.

    • 28 minutes ago
      undefined
  • Razengan2 hours ago
    An iPhone? A laptop?
  • TacticalCoderan hour ago
    > The device was concealed in toilet paper, and its contents were encrypted.

    Concealing a recording device in a conference room in toilet paper is a bit strange. Do executives meet in the toilets to discuss strategic moves?

    • ReptileMan22 minutes ago
      Well ... a lot of products lately get enshittified.
  • TheArchitectAut29 minutes ago
    [dead]
  • ChrisArchitect2 hours ago
    • dang41 minutes ago
      We've merged that thread hither, since current article has more background.
  • rvz2 hours ago
    So but OpenAI did it to Apple and they were caught, and now OpenAI doesn't like it when it happens to them?

    Either way, there goes the false flag and the reason for companies to stop hiring humans over this espionage.

  • wren6991an hour ago
    They're trying to distil OpenAI employees now. Absolutely shameless
  • clustrfunkan hour ago
    There’s absolutely no way Abdulrahman did this. This was a setup.