David Sacks：安全过滤反噬网络防御，OpenCode 攻击中模型拒绝分析漏洞利用代码
Sacks 举了个挺扎心的例子：防御方模型被安全过滤卡住，攻击方反而绕过去了，这个错位值得搞安全的人看看。
美国 AI 主管 David Sacks 在 X 上发文称，OpenCode（此前还有 Hugging Face）在中途拦截攻击时遇到同一堵墙：前沿模型因漏洞载荷触发安全过滤，拒绝分析防御所需的漏洞利用代码，导致护栏反而帮了倒忙。他同时指出攻击者能绕过限制获取先进能力，并称中国模型在网络能力上仅落后美国前沿约 6–9 个月，且不受美国管辖。Sacks 的结论是：持久的应对方式是去中心化，让防御者自行获取并运行强大模型来构建网络防御。
This illustrates the point I’ve been making about the limits of centralized approaches to SI safety in cyber.
OpenCode (and earlier Hugging Face) hit the same wall mid-attack: frontier models refused to analyze the very exploits needed for defense because the payloads tripped safety filters. The guardrails backfired.
Meanwhile, the attackers found a way around restrictions to access advanced capabilities. This is not surprising. Chinese models are only about 6–9 months behind the American frontier in cyber. Obviously the U.S. has no jurisdiction over them.
The only durable response is decentralized: make powerful models available so defenders can build and run their own cyber defenses. The only solution to SI-powered cyberattacks is SI-powered cyber defense.
