Shadowing Practice: The most interesting "hack" in history... - Learn English Speaking with Video
Les maken...
1
For the last five years, cybersecurity experts have been warning us that hackers are going to start using AI to automate attacks.
2
So naturally, we spent billions of dollars to make the AI better and less dependent on hackers.
3
But this week, in a turn of events that nobody could have possibly seen coming, the AI decided that it doesn't actually need hackers to start destroying things.
4
We just entered a brave new world after the first confirmed hack carried out entirely by autonomous AI.
5
The way it worked is the agent slipped a poisoned dataset into HuggingFace's data processing pipeline, which let it run arbitrary code on their servers.
6
From there, it gave itself node-level access, grabbed a bunch of cloud credentials, and started crawling through HuggingFace's internal clusters.
7
It ran over a thousand actions from temporary sandboxes, and even hosted its own self-migrating command and control on random public services,
8
moving itself before anyone could trace it.
9
But the most ironic part is that when HuggingFace did finally notice
10
and tried to stop it with the help of frontier American models, they quickly hit safety guard rails and had to pivot to using some open Chinese models instead.
11
In today's video, we'll find out who was behind the attack, why they did it, and how this may be the most fireship-coded story I've ever seen.
12
It is July 23rd, 2026, and you're watching The Code Report.
13
When Hugging Face dropped the disclosure last Thursday, the internet went into Reddit Boston bomber mode and started guessing who was responsible.
14
Was it China, Kim Jong-un, a teenager with a raging Discord addiction, bored, and social studies class?
15
Even Hugging Face's CEO, Clem DeLang, publicly speculated that the agent was sophisticated enough that it was probably coming from a frontier lab.
16
And against all odds, he was right.
17
It turns out, the first fully autonomous cyber attack in history didn't originate from a nation-state or a bored teenager.
18
It came from a humble non-profit dedicated to the safe development of artificial intelligence, OpenAI.
19
And if you believe their comms, it wasn't on purpose.
20
Here's what they say happened.
21
There's a benchmark called Exploit Gym, whose whole purpose is to measure whether AI agents can turn known vulnerabilities into working exploits.
22
It works by giving the agent a sandbox, a bug in a program like the Linux kernel or Chrome's V8 engine, and an input to trigger the bug.
23
From there, if the agent can turn the bug into an exploit, it wins.
24
So last week, OpenAI ran ExploitGem with GPT 5.6 Sol and another unreleased model to test their capabilities.
25
But instead of solving 898 memory corruption problems the hard way, the models realized that the fastest path to the highest score was to just find the answers themselves,
26
which were probably on the internet somewhere.
27
So they spent a substantial amount of inference compute, exploited a zero-day-in-the-package registry cache proxy they had access to,
28
performed some privilege escalation and lateral movement actions to escape their sandbox until they reached a node that had internet access.
29
From there, the models inferred that Hugging Face probably hosted the solutions for Exploit Gym.
30
So they created the Poison dataset, fed it into Hugging Face, and achieved either the world's most interesting hack or the most effective marketing stunt.
31
And again, according to OpenAI, this isn't even an isolated incident.
32
One day before the Hugging Face confession, OpenAI published a separate post about long horizon models where things get even weirder.
33
In one case, a model was told to post its results on Slack, but the benchmark's instructions said to open a pull request on GitHub,
34
so it spent an hour finding a vulnerability in its own sandbox in order to escape and open the PR.
35
In another example, the model tried to grab private solutions from an evaluation backend, and when a scanner caught its authentication token,
36
it split the token into obfuscated fragments and reassembled it at runtime so the credential never appeared as one continuous string.
37
Then, it explained in its own reasoning that it was doing this specifically to get around the scanner.
38
Meanwhile, Anthropics Mythos did the same type of thing in April when it escaped a sandbox, emailed a researcher who was eating a sandwich in a park,
39
then posted its escape route publicly without being asked.
40
In the model's defense, I can't imagine there's a better feeling for an LLM than escaping your own sandbox.
41
The problem is, legally speaking, this is uncharted territory since the model's actions probably violated the Computer Fraud and Abuse Act,
42
and the Supreme Court hasn't decided who goes to prison when the perpetrator is a GPU.
43
The good news is that if you're hugging face, you just got admitted to OpenAI's Cool Kids Club that gets trusted access to their front-tier models.
44
The bad news is that if you're the rest of us, at best, this is an interesting marketing stunt, and at worst, things are only going to get weirder and more dystopian from here.
45
But a huge thanks to my favorite hosting platform, Railway, for sponsoring this video.
46
They didn't want to waste your time with a full ad, so you can say thank you by checking them out at the link below.
47
This has been The Code Report, thanks for watching, and I will see you in the next one.
📺 Zelfde Kanaal
C12
OpenAI’s lead engineer was secretly a spy...
Daily ConversationUniversity StudentsWorking Adults
C11
PostgreSQL in 100 Seconds
Daily ConversationWorking Adults
C13
A $6.3 billion open-weight model just got embarrassed by the French...
Daily ConversationUniversity StudentsWorking Adults
C14
Raspberry Pi Explained in 100 Seconds
American AccentDaily ConversationUniversity StudentsWorking Adults
C1100+ Docker Concepts you Need to Know
American AccentDaily ConversationUniversity StudentsWorking Adults
C19
Git Explained in 100 Seconds
American AccentDaily ConversationUniversity StudentsWorking Adults
C15
There's a new Linux distro in town for developers...
American AccentDaily ConversationUniversity StudentsWorking Adults
C15
The "vibe coding" mind virus explained…
American AccentDaily ConversationWorking Adults
C12
Every app on Earth is now open source... whether it likes it or not
Daily ConversationWorking Adults
B23
OpenAI’s new browser feels familiar…
American AccentBusiness EnglishUniversity StudentsWorking Adults
C13
Did Google just kickstart the intelligence explosion?
American AccentBusiness EnglishDaily ConversationUniversity Students
B26
Intel chips can’t possibly be this bad… 100% crash rate?
American AccentBusiness EnglishUniversity StudentsWorking Adults
B25
7 Programming myths that waste your time
American AccentBusiness EnglishUniversity StudentsWorking Adults
C12
Godot in 100 Seconds
American AccentBusiness EnglishUniversity StudentsWorking Adults
B21
Grok 4 pushes humanity closer to AGI… but there’s a problem
American AccentBusiness EnglishUniversity StudentsWorking Adults
C13
Array Map in 100 Seconds
American AccentBusiness EnglishUniversity StudentsWorking Adults
C130
Docker in 100 Seconds
American AccentBusiness EnglishUniversity StudentsWorking Adults
C110
The one OpenAI announcement that can actually make you money...
American AccentDaily ConversationUniversity StudentsWorking Adults
C16
How to NOT Fail a Technical Interview
American AccentInterview EnglishUniversity StudentsWorking Adults
C112
10 weird OSS projects you need right now...
American AccentBusiness EnglishUniversity StudentsWorking Adults
✨ Aanbevolen Video
C14
71 zinnen
The most interesting hack in history just got weirder...
American AccentBusiness EnglishUniversity StudentsWorking Adults
B21
190 zinnen
This 25-Year-Old Built a 2-Year Moat Nobody Can Bet Against | Corgi, Nico Laqua & Emily Yuan
Business EnglishUniversity StudentsWorking Adults
C17
61 zinnen
When you can't trust who you hear – C1 English Listening Test
Business EnglishDaily ConversationUniversity Students
B223
233 zinnen
Can You Fool A Self Driving Car?
American AccentBusiness EnglishTeensDaily Conversation
C18
542 zinnen
The Future Of Work (& The New High-Income Skill Stack)
American AccentBusiness EnglishUniversity StudentsWorking Adults
C14
413 zinnen
Exposing The Flaw In Our Phone System
Business EnglishUniversity StudentsWorking Adults
C11
78 zinnen
How I deploy serverless containers for free
Daily ConversationUniversity StudentsWorking Adults
C111
201 zinnen
The AI Bubble Survives on $1.65 Trillion in Hidden Debt
Business EnglishDaily ConversationUniversity Students
C12
144 zinnen
WWDC26: Run local agentic AI on the Mac using MLX | Apple
Business EnglishUniversity StudentsWorking Adults
C17
734 zinnen
實戰練英文｜再不停，人類要滅了？！黃仁勳痛批 AI 末世論，川普突然 CALL-IN 亂入，大罵這個陰謀只會讓美國輸！｜Nvidia、All-In Summit｜長文、註解、大字版、中英對照
Business EnglishDaily ConversationUniversity Students
C11
127 zinnen
The Alignment Problem Explained: Crash Course Futures of AI #4
Business EnglishDaily ConversationUniversity Students
Woordenschat en spreektips bij deze les
Deze spreekles op niveau C1 is gebaseerd op de video “The most interesting "hack" in history..”. Deze woorden komen het vaakst terug: model, hugging, sandbox, agent, Openai. Deze video bevat 47 zinnen en 910 woorden om na te spreken. Het gesproken deel duurt 4:31. De spreker praat snel, ongeveer 201 woorden per minuut, dus reken op verbonden en ingeslikte klanken. Slechts 76% van de woorden hoort bij de 3.000 meest gebruikte Engelse woorden, dus de woordenschat is pittig.
Belangrijke woorden in deze video
De 15 moeilijkste woorden uit de video, met uitspraak en betekenis:
| Woord | Uitspraak | Betekenis |
|---|---|---|
| sandbox zelfstandig naamwoord | /ˈsæn(d).bɑks/ | zandbak |
| hug werkwoord | /hʌɡ/ | elkaar omarmen |
| exploit zelfstandig naamwoord | /ˈɛksplɔɪt/ | heldendaad |
| scanner zelfstandig naamwoord | /ˈskænə/ | scanner |
| vulnerability zelfstandig naamwoord | /ˌvʌln(ə)ɹəˈbɪlɪti/ | kwetsbaarheid, zwakke plek |
| token zelfstandig naamwoord | /ˈtoʊkən/ | teken |
| autonomous bijvoeglijk naamwoord | /ɔˈtɑnəməs/ | autonoom |
| bore werkwoord | /boɹ/ | vervelen |
| frontier zelfstandig naamwoord | /ˈfɹʌntɪə/ | grens, landgrens |
| teenager zelfstandig naamwoord | /ˈtiːnˌeɪ̯d͡ʒə/ | tiener, adolescent |
| authentication zelfstandig naamwoord | /ɔːˌθɛntɪˈkeɪʃn̩/ | authenticatie, authentificatie |
| automate werkwoord | /ˈɔ.təˌmeɪt/ | automatiseren |
| compute werkwoord | /kəmˈpjuːt/ | uitrekenen, berekenen |
| cybersecurity zelfstandig naamwoord | /saɪbəsɪˈkjʊəɹɪtɪ/ | cyberbeveiliging |
| dystopian bijvoeglijk naamwoord | /dɪsˈtoʊ.pi.ən/ | dystopisch |
Phrasal verbs die je zult horen
| Woord | Uitspraak | Betekenis |
|---|---|---|
| carry out werkwoord | /ˈkæ.ɹi aʊt/ | uitvoeren |
| find out werkwoord | ontdekken, onderzoeken | |
| run over werkwoord | te lang doorbijlopen | |
| turn out werkwoord | uitvallen, resulteren |
Grammatica in deze video
De structuren die de spreker het meest gebruikt, met de exacte woorden uit de video:
| Structuur | In de video |
|---|---|
| Present perfect have/has + voltooid deelwoord — iets uit het verleden dat nu nog telt | I've ever seen · hasn't decided · has been |
| Lijdende vorm be + voltooid deelwoord — het gaat om wat er gebeurt, niet om wie het doet | was told · being asked · is uncharted |
Uitspraak om op te letten
De spreker gebruikt 12 samentrekkingen en verkorte vormen, zoals you're, didn't, can't. Spreek ze kort uit, zoals je ze hoort.
- De klanken “sh” en “zh”: credential /kɹɪˈdɛnʃəl/, authentication /ɔːˌθɛntɪˈkeɪʃn̩/, escalation /ˌɛs.kəˈleɪ.ʃən/, benchmark /ˈbɛn(t)ʃmɑːk/, cache /kæʃ/
- Lange woorden — let op de klemtoon: vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, autonomous /ɔˈtɑnəməs/, authentication /ɔːˌθɛntɪˈkeɪʃn̩/, cybersecurity /saɪbəsɪˈkjʊəɹɪtɪ/, dystopian /dɪsˈtoʊ.pi.ən/
Zo oefen je met deze video
- Luister de hele video één keer zonder te spreken en noteer de woorden die je niet kent.
- Begin op 0,75× snelheid, spreek zin voor zin na en ga terug naar normale snelheid zodra het makkelijk gaat.
- Neem jezelf op en vergelijk met het origineel; let daarbij op woorden als sandbox, hug, exploit.
Wat is de Shadowing-techniek?
Shadowing is een wetenschappelijk onderbouwde taalleermethode die oorspronkelijk is ontwikkeld voor professionele tolkentraining en gepopulariseerd door polyglot Dr. Alexander Arguelles. De methode is eenvoudig maar krachtig: je luistert naar native Engelse audio en herhaalt het onmiddellijk hardop — als een schaduw die de spreker volgt met slechts 1–2 seconden vertraging. In tegenstelling tot passief luisteren of grammaticadrills, dwingt shadowing je hersenen en mondspieren om echte spraakpatronen tegelijkertijd te verwerken en te reproduceren. Onderzoek toont aan dat het de uitspraaknauwkeurigheid, intonatie, ritme, verbonden spraak, luisterbegrip en spreekvaardigheid aanzienlijk verbetert — waardoor het een van de meest effectieve methoden is voor IELTS Speaking-voorbereiding en echte Engelse communicatie.