They ship with their own sandboxing by default, and Codex specifically is open source.
Also in the news: https://www.whitehouse.gov/presidential-actions/2026/08/expa...
"The American private sector is the most innovative and
technologically advanced in the world, and its scale,
speed, and capacity secure a critical offensive cyber
advantage for the United States."Since we now have three "Codex"es, I think it's worth specifying you're talking about codex-cli/tui. Codex the hosted version and Codex the GUI are both fully proprietary I think (besides the codex-cli/tui parts they use, I'm guessing mainly the app-server stuff).
Or we are just assuming that was a PR stunt, which it almost certainly was.
Either way, this shit isn’t getting near my system.
No.
> Or we are just assuming that was a PR stunt, which it almost certainly was.
It wasn't.
> Either way, this shit isn’t getting near my system.
Sounds about right.
> It wasn't.
Prove it. But you can’t, which is problematic for you.
Nobody should believe anything OpenAI says about anything. They either lied about it breaking out of a sand box, or they’re incompetent by building a sandbox their AI could break out of.
It’s a cute story, though.
More honestly: "Convince me. Except I've already made up my mind, so I'll never let you."
And like yeah, that does seem to be the case, so that's a bit rough indeed.
That said, if you feel like being a bit intellectually daring tonight, here you go: https://youtu.be/87DyyMV0kCY
> Nobody should believe anything OpenAI says about anything.
It's a great thing you bring up beliefs: it's the only thing people ever have, both you and me.
Personally, after hearing their account (linked above), I don't find much to disbelieve on it. It's just a series of "oh okay, that's fun, makes sense" moments. It's normal stuff. They're definitely at least a little proud of having popped a few shops, but that's very realistic in its own way.
I guess your best next option is waiting for a lawsuit to reach discovery or something, and then it's a matter of how dedicated you are to your disbelief. This indeed hasn't happened yet though, if it ever will, so nothing for me to provide (nor for you).
Speaking of, note that I don't have any more reason to believe the likes of you than I do OpenAI. Especially because it all just comes across as trite cynicism, mixed with generous amounts of wishful thinking. I also happen to be simply using these things, so that further plays into why I don't find these events particularly miraculous. It's already existing capability for the most part, so why would I? The only difference is disabled guardrails and better temporal coherence, which is exactly what you'd expect from upcoming models still in eval.
> or they’re incompetent by building a sandbox their AI could break out of.
One could definitely make the argument that someone was at least a little asleep at the wheel, but I don't think that makes them particularly incompetent. Just the normal variety you'll find anywhere else.
So the best part for me is I don’t have to prove anything. I’m not the one claiming it happened.
The onus is on them. Clearly HF did get hacked, but there is no unbiased evidence that this thing broke out of a sandbox unbeknownst to OAI, except OAI saying so.