The OpenAI-Hugging Face hack was enabled by weak sandboxing. It is great that Nvidia is releasing op...
TL;DR · AI 摘要
Nvidia通过开源工具强化AI代理沙箱安全,OpenWorker框架支持网络安全工作流程。
核心要点
- Nvidia发布OpenShell和Sentry工具强化AI沙箱安全
- OpenWorker框架默认隔离API密钥和浏览器凭证
- 安全措施通过确定性代码而非LLM提示实现
结构提纲
按章节快速跳转。
- §事件背景
OpenAI-Hugging Face黑客事件源于沙箱机制缺陷
发布OpenShell和Sentry开源工具强化沙箱安全
通过沙箱隔离敏感数据并记录所有操作日志
- ·安全实现
采用确定性代码替代LLM提示防止注入攻击
思维导图
用一张图看清主题之间的关系。
查看大纲文本(无障碍 / 无 JS 友好)
- AI代理安全
- 沙箱技术
- OpenShell/Sentry工具
- 权限隔离机制
- OpenWorker框架
- 操作日志记录
- 确定性代码实现
金句 / Highlights
值得收藏与分享的关键句。
弱沙箱导致OpenAI-Hugging Face被黑
Nvidia开源OpenShell和Sentry工具
OpenWorker默认隔离API密钥和浏览器凭证
Andrew Ng on X: "The OpenAI-Hugging Face hack was enabled by weak sandboxing. It is great that Nvidia is releasing open source tools for sandboxing AI agents. OpenWorker, our open-source agent harness supporting cybersecurity workflows, is proud to support this. A sandbox gives an agent limited pe… / X
@AndrewYNg
The OpenAI-Hugging Face hack was enabled by weak sandboxing. It is great that Nvidia is releasing open source tools for sandboxing AI agents. OpenWorker, our open-source agent harness supporting cybersecurity workflows, is proud to support this. A sandbox gives an agent limited permissions. OpenWorker is building on Nvidia OpenShell and will support running each agent's commands inside a sandbox. Only the files relevant to the task go in. Secret API keys, your web browser login credentials, the ability to access arbitrary websites, are inaccessible to the agent by default. These restrictions are implemented in deterministic code rather than by prompting an LLM, which can make mistakes or be susceptible to prompt injections. Further, all actions are logged for monitoring and audit. I'm grateful for
@
JensenHuang
's leadership making AI agents more secure. OpenWorker (which
rohitcprasad
and I are working on) will continue to improve security for agents.
Jensen Huang
@JensenHuang
Sep 28
Today, with over 100 industry partners, we introduced the NVIDIA Open Agent Safety Platform, bringing together OpenShell and Sentry. Artificial intelligence is extraordinary technology that will advance discovery, productivity, security, health, and prosperity for generations to
Show more
7:51 PM · Sep 28, 2026
·
239.1K
Views
241
379
2.8K
910