行业多源确认81°

Will Depue 称可完全访问 Anthropic Slack 并冒充员工,若属实影响严重

精选理由

有人声称拿到了 Anthropic 的 Slack 全部权限还能冒充员工,泄漏的是训练方法和实验记录,这事离谱到值得看看后续怎么发展。

Will Depue 声称自己获得了对 Anthropic 内部 Slack 的完全访问权限,并能冒充该公司的员工。若属实,泄露内容可能包括训练方法、未发表结果、失败实验以及未来模型规划,竞争者无需拿到模型权重也能省去大量试错成本。员工身份冒充还意味着恶意请求可伪装成可信同事的日常消息,成为渗透其他系统的入口。文中判断这可能是 Anthropic 迄今面临的最大威胁之一。

原文 · kimmonismus

If Will Depue’s claims of full Slack access and employee impersonation at Anthropic are accurate, the potential damage would be severe.

Training methods, unpublished results, failed experiments and plans for future models could reveal what works, what doesn’t, and where the lab is heading. That knowledge could spare competitors expensive trial and error, even without access to model weights.

The ability to impersonate employees would create another risk: malicious requests could look like routine messages from trusted colleagues, potentially opening paths into other systems.

So yeah, if this turns out to be true, this is one of the biggest threads Anthropic will face to date.