> the ballyhooed OpenAI escape depended on a pedestrian failure of containment

I... I can't believe people still think this way. A whole class of security measures are no longer useful and this guy thinks it is "pedestrian".

This kind of isolation - artifactory having access to only a specific IPs - is what is used in most places, including my university and at my own job.

LLMs basically rendered this kind of isolation almost useless by bringing in the ability to chain together never before found vulnerabilities to escape the containment. This was not possible before.

How is this pedestrian??! The author might say "oh well they should have airgapped actually" in a smug way. But you can only know this retrospectively. Even then, isn't it noteworthy and a meaningfully different class of cyber attack?