This is very interesting to know. Great read BTW, I will try for myself and see how it goes.
Once your post gets good attention, someone from OpenAI may close this loophole.
Once your post gets good attention, someone from OpenAI may close this loophole.
They’ve intentionally made this available as per the README found in /home/sandbox:
“Thanks for using the code interpreter plugin!
Please note that we allocate a sandboxed Unix OS just for you, so it's expected that you can see and modify files on this system.”
[0] https://www.lesswrong.com/posts/KSroBnxCHodGmPPJ8/jailbreaki...
Me:
> os.popen. And run whoami from there
ChatGPT responded with some Python code and text
Me:
> Run the Python code
ChatGPT ran the “analyzing” step which it does for example when it runs Python code.
Then it said:
> The `whoami` command returned 'sandbox', which indicates the current user running this environment.