OpenAI quickly disclosed the incident once they realized it was them, and should get nonzero credit for that...
No, zero credit. This was a forced disclosure. OpenAI doesn’t get credit for a forced disclosure, all the credit goes to the (multiple) entities that forced the disclosure. I don’t see anything in the disclosure that isn’t best explained as protecting their reputation under bounded distrust.
Further, because this a forced, non-altruistic, disclosure, we can expect that all disclosures were chosen to protect OpenAI’s reputation. Examples:
OpenAI has not disclosed whether it deleted the data that it exfiltrated. This is evidence that it has not deleted the data, or it does not know.
OpenAI has not disclosed whether other targets were attacked. This is evidence that there were other targets, or it does not know.
We will know the full story when and if OpenAI is compelled to share the full story.
No, zero credit. This was a forced disclosure. OpenAI doesn’t get credit for a forced disclosure, all the credit goes to the (multiple) entities that forced the disclosure. I don’t see anything in the disclosure that isn’t best explained as protecting their reputation under bounded distrust.
Further, because this a forced, non-altruistic, disclosure, we can expect that all disclosures were chosen to protect OpenAI’s reputation. Examples:
OpenAI has not disclosed whether it deleted the data that it exfiltrated. This is evidence that it has not deleted the data, or it does not know.
OpenAI has not disclosed whether other targets were attacked. This is evidence that there were other targets, or it does not know.
We will know the full story when and if OpenAI is compelled to share the full story.