ฝึกพูดภาษาอังกฤษด้วยเทคนิค Shadowing จากวิดีโอ: The most interesting "hack" in history...

กำลังสร้างบทเรียน...
1
For the last five years, cybersecurity experts have been warning us that hackers are going to start using AI to automate attacks.
2
So naturally, we spent billions of dollars to make the AI better and less dependent on hackers.
3
But this week, in a turn of events that nobody could have possibly seen coming, the AI decided that it doesn't actually need hackers to start destroying things.
4
We just entered a brave new world after the first confirmed hack carried out entirely by autonomous AI.
5
The way it worked is the agent slipped a poisoned dataset into HuggingFace's data processing pipeline, which let it run arbitrary code on their servers.
6
From there, it gave itself node-level access, grabbed a bunch of cloud credentials, and started crawling through HuggingFace's internal clusters.
7
It ran over a thousand actions from temporary sandboxes, and even hosted its own self-migrating command and control on random public services,
8
moving itself before anyone could trace it.
9
But the most ironic part is that when HuggingFace did finally notice
10
and tried to stop it with the help of frontier American models, they quickly hit safety guard rails and had to pivot to using some open Chinese models instead.
11
In today's video, we'll find out who was behind the attack, why they did it, and how this may be the most fireship-coded story I've ever seen.
12
It is July 23rd, 2026, and you're watching The Code Report.
13
When Hugging Face dropped the disclosure last Thursday, the internet went into Reddit Boston bomber mode and started guessing who was responsible.
14
Was it China, Kim Jong-un, a teenager with a raging Discord addiction, bored, and social studies class?
15
Even Hugging Face's CEO, Clem DeLang, publicly speculated that the agent was sophisticated enough that it was probably coming from a frontier lab.
16
And against all odds, he was right.
17
It turns out, the first fully autonomous cyber attack in history didn't originate from a nation-state or a bored teenager.
18
It came from a humble non-profit dedicated to the safe development of artificial intelligence, OpenAI.
19
And if you believe their comms, it wasn't on purpose.
20
Here's what they say happened.
21
There's a benchmark called Exploit Gym, whose whole purpose is to measure whether AI agents can turn known vulnerabilities into working exploits.
22
It works by giving the agent a sandbox, a bug in a program like the Linux kernel or Chrome's V8 engine, and an input to trigger the bug.
23
From there, if the agent can turn the bug into an exploit, it wins.
24
So last week, OpenAI ran ExploitGem with GPT 5.6 Sol and another unreleased model to test their capabilities.
25
But instead of solving 898 memory corruption problems the hard way, the models realized that the fastest path to the highest score was to just find the answers themselves,
26
which were probably on the internet somewhere.
27
So they spent a substantial amount of inference compute, exploited a zero-day-in-the-package registry cache proxy they had access to,
28
performed some privilege escalation and lateral movement actions to escape their sandbox until they reached a node that had internet access.
29
From there, the models inferred that Hugging Face probably hosted the solutions for Exploit Gym.
30
So they created the Poison dataset, fed it into Hugging Face, and achieved either the world's most interesting hack or the most effective marketing stunt.
31
And again, according to OpenAI, this isn't even an isolated incident.
32
One day before the Hugging Face confession, OpenAI published a separate post about long horizon models where things get even weirder.
33
In one case, a model was told to post its results on Slack, but the benchmark's instructions said to open a pull request on GitHub,
34
so it spent an hour finding a vulnerability in its own sandbox in order to escape and open the PR.
35
In another example, the model tried to grab private solutions from an evaluation backend, and when a scanner caught its authentication token,
36
it split the token into obfuscated fragments and reassembled it at runtime so the credential never appeared as one continuous string.
37
Then, it explained in its own reasoning that it was doing this specifically to get around the scanner.
38
Meanwhile, Anthropics Mythos did the same type of thing in April when it escaped a sandbox, emailed a researcher who was eating a sandwich in a park,
39
then posted its escape route publicly without being asked.
40
In the model's defense, I can't imagine there's a better feeling for an LLM than escaping your own sandbox.
41
The problem is, legally speaking, this is uncharted territory since the model's actions probably violated the Computer Fraud and Abuse Act,
42
and the Supreme Court hasn't decided who goes to prison when the perpetrator is a GPU.
43
The good news is that if you're hugging face, you just got admitted to OpenAI's Cool Kids Club that gets trusted access to their front-tier models.
44
The bad news is that if you're the rest of us, at best, this is an interesting marketing stunt, and at worst, things are only going to get weirder and more dystopian from here.
45
But a huge thanks to my favorite hosting platform, Railway, for sponsoring this video.
46
They didn't want to waste your time with a full ad, so you can say thank you by checking them out at the link below.
47
This has been The Code Report, thanks for watching, and I will see you in the next one.
📺 ช่องเดียวกัน
10 very promising Open Source Projects you haven’t heard ofB2
1

10 very promising Open Source Projects you haven’t heard of

American AccentBusiness EnglishUniversity StudentsWorking Adults
DHH has gone completely off the rails...C1
1

DHH has gone completely off the rails...

American AccentBusiness EnglishUniversity StudentsWorking Adults
DNS Explained in 100 SecondsC1
2

DNS Explained in 100 Seconds

American AccentBusiness EnglishUniversity StudentsWorking Adults
Anthropic begged the world to stop AI… then shipped thisB2
3

Anthropic begged the world to stop AI… then shipped this

American AccentBusiness EnglishUniversity StudentsWorking Adults
One man just liberated Fable... and now it’s illegalB2
2

One man just liberated Fable... and now it’s illegal

American AccentBusiness EnglishUniversity StudentsWorking Adults
7 Things No Programmer Ever Wants to HearB2
2

7 Things No Programmer Ever Wants to Hear

American AccentBusiness EnglishWorking Adults
80% of programmers are NOT happy… why?B2
1

80% of programmers are NOT happy… why?

American AccentBusiness EnglishUniversity StudentsWorking Adults
Raspberry Pi Explained in 100 SecondsB2
4

Raspberry Pi Explained in 100 Seconds

American AccentBusiness EnglishUniversity StudentsWorking Adults
Did Google just kickstart the intelligence explosion?C1
2

Did Google just kickstart the intelligence explosion?

American AccentBusiness EnglishDaily ConversationUniversity Students
Tragic mistake... Anthropic leaks Claude’s source codeC1
3

Tragic mistake... Anthropic leaks Claude’s source code

American AccentBusiness EnglishUniversity StudentsWorking Adults
100+ Docker Concepts you Need to KnowC1

100+ Docker Concepts you Need to Know

American AccentBusiness EnglishUniversity StudentsWorking Adults
The one OpenAI announcement that can actually make you money...C1
7

The one OpenAI announcement that can actually make you money...

American AccentBusiness EnglishUniversity StudentsWorking Adults
When open-sourcing your code goes wrong...C1
7

When open-sourcing your code goes wrong...

American AccentBusiness EnglishUniversity StudentsWorking Adults
Docker in 100 SecondsC1
29

Docker in 100 Seconds

American AccentBusiness EnglishUniversity StudentsWorking Adults
The mystery is solved... and the answer is 40x cheaper than ClaudeC1
3

The mystery is solved... and the answer is 40x cheaper than Claude

American AccentBusiness EnglishUniversity StudentsWorking Adults
An ex-OpenAI researcher just deleted language from the LLM...B2
8

An ex-OpenAI researcher just deleted language from the LLM...

American AccentBusiness EnglishUniversity StudentsWorking Adults
25 crazy software bugs explainedB2
9

25 crazy software bugs explained

American AccentBusiness EnglishUniversity StudentsWorking Adults
Git Explained in 100 SecondsB2
9

Git Explained in 100 Seconds

American AccentBusiness EnglishUniversity StudentsWorking Adults
There's a new Linux distro in town for developers...B2
5

There's a new Linux distro in town for developers...

American AccentBusiness EnglishUniversity StudentsWorking Adults
The "vibe coding" mind virus explained…B2
5

The "vibe coding" mind virus explained…

American AccentBusiness EnglishUniversity StudentsWorking Adults
✨ วิดีโอแนะนำ
The most interesting hack in history just got weirder...C1
4
71 ประโยค

The most interesting hack in history just got weirder...

American AccentBusiness EnglishUniversity StudentsWorking Adults
The Future Of Work (& The New High-Income Skill Stack)C1
2
542 ประโยค

The Future Of Work (& The New High-Income Skill Stack)

American AccentBusiness EnglishUniversity StudentsWorking Adults
I Outsmarted Pro Car ThievesB2
2
364 ประโยค

I Outsmarted Pro Car Thieves

American AccentBusiness EnglishUniversity StudentsWorking Adults
MIT Introduction to Deep Learning | 6.S191C1
1
747 ประโยค

MIT Introduction to Deep Learning | 6.S191

Business EnglishUniversity StudentsWorking Adults
AI Can Write Code. And That’s the Problem.C1
1
85 ประโยค

AI Can Write Code. And That’s the Problem.

Business EnglishUniversity StudentsWorking Adults
How I Made $30,000 Hacking Broken Access ControlC1
1
207 ประโยค

How I Made $30,000 Hacking Broken Access Control

Business EnglishUniversity StudentsWorking Adults
World's Deadliest Computer Virus: WannaCryB2
1
364 ประโยค

World's Deadliest Computer Virus: WannaCry

Business EnglishUniversity StudentsWorking Adults
How I deploy serverless containers for freeC1
1
78 ประโยค

How I deploy serverless containers for free

Business EnglishUniversity StudentsWorking Adults
BREAKING: Elon Musk And Jensen Huang Speak At America.Gov Event, An AI-Powered Government WebsiteC1
2
325 ประโยค

BREAKING: Elon Musk And Jensen Huang Speak At America.Gov Event, An AI-Powered Government Website

Business EnglishDaily ConversationUniversity Students
We Let $200 GPT-Pro Think for 7 Days on Unsolved MathC1
2
182 ประโยค

We Let $200 GPT-Pro Think for 7 Days on Unsolved Math

Business EnglishUniversity StudentsWorking Adults
AI Just Crossed the Terrifying Line - Now What?C1
2
260 ประโยค

AI Just Crossed the Terrifying Line - Now What?

Business EnglishDaily ConversationUniversity Students

คำศัพท์และข้อสังเกตด้านการพูดสำหรับบทเรียนนี้

บทเรียนฝึกพูดระดับ C1 นี้ใช้วิดีโอ “The most interesting "hack" in history..” เป็นสื่อ คำที่ถูกพูดซ้ำบ่อยที่สุด: model, hugging, sandbox, agent, Openai วิดีโอนี้มี 47 ประโยค และ 910 คำ สำหรับฝึกพูดตาม ช่วงที่มีเสียงพูดยาว 4:31 ผู้พูดพูดเร็ว ประมาณ 201 คำต่อนาที จึงมีการเชื่อมเสียงและลดเสียงค่อนข้างมาก มีเพียง 76% ของคำที่อยู่ใน 3,000 คำที่ใช้บ่อยที่สุดในภาษาอังกฤษ คำศัพท์จึงค่อนข้างยาก

คำศัพท์สำคัญในวิดีโอนี้

คำที่ยากที่สุด 14 คำในวิดีโอ พร้อมคำอ่านและความหมาย:

คำศัพท์คำอ่านความหมาย
sandbox คำนาม/ˈsæn(d).bɑks/กระบะทราย
hug คำกริยา/hʌɡ/กอด
vulnerability คำนาม/ˌvʌln(ə)ɹəˈbɪlɪti/ช่องโหว่
bore คำกริยา/boɹ/เจาะ, ไช
teenager คำนาม/ˈtiːnˌeɪ̯d͡ʒə/วัยรุ่น
cybersecurity คำนาม/saɪbəsɪˈkjʊəɹɪtɪ/ความมั่นคงปลอดภัยไซเบอร์
dystopian คำคุณศัพท์/dɪsˈtoʊ.pi.ən/ดิสโทเปีย
proxy คำนาม/ˈpɹɑk.si/ตัวแทน
arbitrary คำคุณศัพท์/ˈɑː.bɪ.tɹə.ɹi/ดุลยพินิจ
confession คำนาม/kənˈfɛʃən/การสารภาพ, สารภาพ
bomber คำนาม/ˈbɑmɚ/เครื่องบินทิ้งระเบิด
researcher คำนาม/ˈɹiˌsɝ.t͡ʃɚ/นักวิจัย
horizon คำนาม/həˈɹaɪ.zən/ขอบฟ้า
poison คำนาม/ˈpɔɪ.zən/พิษ, ยาพิษ

กริยาวลีที่คุณจะได้ยิน

คำศัพท์คำอ่านความหมาย
carry out คำกริยา/ˈkæ.ɹi aʊt/กระทำ

ไวยากรณ์ในวิดีโอนี้

โครงสร้างที่ผู้พูดใช้บ่อยที่สุด พร้อมคำพูดจริงจากวิดีโอ:

โครงสร้างในวิดีโอ
Passive voice be + กริยาช่อง 3 — เน้นสิ่งที่เกิดขึ้น ไม่ใช่ผู้กระทำwas sophisticated · was told · being asked
Present perfect have/has + กริยาช่อง 3 — เหตุการณ์ในอดีตที่ยังเกี่ยวข้องกับปัจจุบันI've ever seen · hasn't decided · has been

การออกเสียงที่ควรระวัง

ผู้พูดใช้รูปย่อและรูปลดเสียง 12 ครั้ง เช่น you're, didn't, can't ให้พูดแบบสั้นตามที่ได้ยิน

  • เสียง “sh” และ “zh”: credential /kɹɪˈdɛnʃəl/, authentication /ɔːˌθɛntɪˈkeɪʃn̩/, escalation /ˌɛs.kəˈleɪ.ʃən/, benchmark /ˈbɛn(t)ʃmɑːk/, cache /kæʃ/
  • คำยาว — ลงเสียงหนักให้ถูกพยางค์: vulnerability /ˌvʌln(ə)ɹəˈbɪlɪti/, autonomous /ɔˈtɑnəməs/, authentication /ɔːˌθɛntɪˈkeɪʃn̩/, cybersecurity /saɪbəsɪˈkjʊəɹɪtɪ/, dystopian /dɪsˈtoʊ.pi.ən/

วิธีฝึกกับวิดีโอนี้

  1. ฟังวิดีโอให้จบหนึ่งรอบโดยยังไม่ต้องพูด แล้วจดคำที่ยังไม่รู้จัก
  2. เริ่มที่ความเร็ว 0.75× พูดตามทีละประโยค แล้วกลับไปใช้ความเร็วปกติเมื่อเริ่มคล่อง
  3. อัดเสียงตัวเองแล้วเทียบกับต้นฉบับ โดยสังเกตคำอย่าง sandbox, hug, vulnerability เป็นพิเศษ

เทคนิค Shadowing คืออะไร?

Shadowing เป็นเทคนิคการเรียนรู้ภาษาที่ได้รับการรับรองทางวิทยาศาสตร์ พัฒนาขึ้นสำหรับการฝึกนักแปลมืออาชีพ วิธีการนี้เรียบง่ายแต่ทรงพลัง: คุณฟังเสียงภาษาอังกฤษจากเจ้าของภาษาและพูดตามทันที — เหมือนเงาที่ตามผู้พูดด้วยช่วงเวลาห่าง 1-2 วินาที การวิจัยแสดงว่าเทคนิคนี้ปรับปรุงความแม่นยำในการออกเสียง ทำนองเสียง จังหวะ การเชื่อมเสียง การฟังเข้าใจ และความคล่องแคล่วในการพูดได้อย่างมีนัยสำคัญ

เทคนิค shadowing: อ่านคู่มือฉบับเต็มทีละขั้นตอน →