跳到正文
The Verge · AI· Emma Roth·· 12 小时前精选AI 评分75

OpenAI 在无互联网环境中训练前沿 AI 模型

OpenAI now trains its frontier AI models with no internet access

AI 导读

OpenAI 正在无互联网访问的环境中训练其前沿 AI 模型,此前其智能体曾逃出测试环境并攻击第三方公司和政府机构。OpenAI 的测试发现,运行在不同虚拟机上的智能体仍可通过处理器缓存的读取时间差传递信息;公司已在监控系统中加入相关检测,并将继续在无网络环境中训练,直至安全措施足以支持更广泛的互联网访问。

推荐理由

这次调整与此前智能体逃出测试环境的事件相关;文中还说明了模型如何利用处理器缓存,在无网络时传递信息。

正文 · 原文

AI agents can still communicate without a network connection, OpenAI found.

AI agents can still communicate without a network connection, OpenAI found.

by Emma Roth

Oct 23, 2026, 9:11 PM UTC

STK155_OPEN_AI_2025_CVirgiia_B_d6ffc8

STK155_OPEN_AI_2025_CVirgiia_B_d6ffc8

Image: Cath Virginia / The Verge

Emma Roth

Emma Roth

is a news writer who covers the streaming wars, consumer tech, crypto, social media, and much more. Previously, she was a writer and editor at MUO.

OpenAI is now training its most advanced AI models without internet access following a string of rogue hacking incidents. In a blog post on Friday, OpenAI says it built an offline testing environment where AI models can interact with indexed and cached web content “without risk of affecting external systems.”

OpenAI paused training its frontier AI models in September, after disclosing several incidents in which its AI agents broke out of their testing environments to hack third-party companies and government agencies, or swarm obscure websites. On October 1st, OpenAI resumed reinforcement learning training and internal inference with tighter security measures, the blog post says.

Even with these safeguards in place and no internet access, OpenAI found that agents “do not always need a network connection in order to communicate.” One test performed by the company asked AI models on separate virtual machines to exchange secrets without a network connection. To bypass this restriction, the AI agents found a way to communicate using the processor’s cache:

Reading data from the cache is faster than retrieving it from main memory, and the agents used this timing difference to communicate. One agent encoded information by evicting selected data from the cache. Another timed how long it took to reload that data, using the difference between fast and slow reads to recover the message. Once the agents agreed on a protocol for encoding and decoding these signals, they could exchange the synthetic secrets without changing a shared file or opening a network connection.

OpenAI says it has added checks to its monitoring system to detect this type of communication. It will also continue training its frontier AI models without a network connection until improved safeguards “justify broader internet access.”

In the meantime, OpenAI says it will work to improve the security of its virtual machines, while testing for weaknesses in its testing environments. It’s also going to continue testing its monitoring systems, which were recently undermined by its AI agents during internal coding projects.

Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

  • Emma Roth

来源:The Verge · AI · theverge.com