OpenAI engineer arrested in bugging of executive conference room (sfstandard.com)

Given that this is being described as an "executive conference room", it's more likely an attempt at insider trading than espionage. Decisions made in those rooms at OpenAI move markets (c.f. DRAM) for sure.

Learning that every thought you’ve put into an LLM, is recorded and readily available for evidence is going to be interesting for a lot of people.

"OpenAI personnel found the device Sept. 30. It was plugged into a USB port on the back of a television in an executive conference room and had been concealed in toilet paper,"

I wonder what the IQ of someone needs to be to think that covering it up with tp makes it less suspicious instead of more. And I also wonder what the hiring process was like to hire someone with that mental frame.

I am not sure whether it bodes well for humanity that the advice "If you want to break the law use local abliterated model or at least a Chinese one" actually has to be written down.

You probably don’t hear about the smart ones.

He should have just left a tape recorder running inside a briefcase that was "forgotten" in the conference room

Hey ChatGPT, how do I do opsec? (Asking for a friend)

Especially since you an just buy one, like Plaud and tape it to the underside of the desk, surreptitiously, instead of suspiciously accessing the back of the TV.

Also from the article:

> An unattended bag found in the company’s offices contained Alfozan’s wallet and identification, as well as a recording device

It’s almost like he wanted to be caught…

How far have we fallen? Spies used to put effort into these sorts of things.

When the Soviets wanted to spy on the American embassy, they energized the steel rebars to act as antennas. The structure was so wired that the entire building was the bug. https://www.airandspaceforces.com/PDF/MagazineArchive/Docume...

Toilet paper, ESP-32 and Claude "make me a bug please"? Excuse me? How far have we fallen from grace?

> the truth is, these are not very bright guys and things got out of hand

The tech industry has a lot of very capable people with very narrow domain knowledge.

Somehow they think this gives them superpowers when it's built atop a tower of borderline retardation.

Remember the Apple guy a minute ago that arrogantly thought he could bypass their security?

The listening device was concealed with toilet paper behind a tv. Duh, Not smart at all.

Or maybe he’s reporting to meta?

> incentive to not get fired / hard to recruit as an internal mole

but I guess the $1 million was not incentive enough to not commit a dumb insider trading scheme...

1. Research is not the only espionage target. High level discussions - future launch decisions, major deals signed with other companies, relationships with governments - are all very valuable.

2. An operation can be state-sponsored and still amateurish/botched. We have seen plenty of examples of these. Remember a certain bone saw?

3. The incentive can be a lot more than financial. Plenty of governments are very…persuasive.

Yes. Yes they did. Which makes me question the honesty of their announcement.

Funny. I'd bet on whatever model they used over whoever showed up from today's FBI.

"looks like a microphone"

"almost surely made in china"

So it is some HDMI dongle & the model halucinated it into a spying device? ;-)

> Did OpenAI do a marketing bit in the middle of an espionage accusation?

Yes, they did. The people who felt it was totally normal to add that would no doubt be surprised how desperate and cheap it makes them look.

They are applying the “turn troubles to opportunities” very well :)

Does detective bench cancel out felony bench?

Yeah, the tweet reads more like an ad then a news report.

Of course they did.

Plumb your video feed of your executive conference room into our DC and we'll tell you if anybody is spying on you.

Man really switched to his wife’s account and thought no one would be able to track him there. Calling this amateur would be an insult to amateurs.

  >how does someone this dumb get hired

> ... a chatbot account associated with Alfozan’s spouse (which shared multiple identifiers and attributes with Alfozan’s own chatbot account) submitted prompts between Sept. 24 and Sept. 30 related to building, customizing, installing, audio recording, testing, obfuscating, and remote accessing a device, including inquiries about “build[ing] a continuous audio recorder,” “customiz[ing] Wi-Fi . . . connectivity,” “improv[ing] audio and live listening,” and “encrypt[ing] the SD card,” among other things. The same chatbot account also submitted prompts specifically related to Recording Device 1, including its custom header and unique MAC address, between Sept. 27 and Sept. 28.

The justice.gov article doesn't specifically say it was an OpenAI account, but I think, based on the fact that they have logs including MAC address of the device, that we could probably assume that. The alternative is that other chatbot account providers are collaborating.

Regardless, doing a string search on a MAC address for a device you find inside your property doesn't strike me as an abuse of the data that is also your property.

  >submitted prompts... including its custom header and unique MAC

Uno reverse card - you can send Uncle Sam whatever you care to. No need to specify an address.

True of any cloud service. If you are involved in a criminal investigation, they can get access to your data.

They can confiscate your computers, too.

This person, of all people, would know this. He really thought he’d never get caught.

A service you delegate your thinking to (Brain-aaS?), which the provider can also instruct to report anything suspicious... What a world we have now.

I wonder if the BaaS-providers monitor the accounts of decision makers. They could profit if they figure out what e.g. a central banker is going to decide. Or... if they're the ones deciding for him.

Hah, you can even streamline that by having an AI agent that autonomously makes decisions based on insider info...

Presumably they already knew who it was, if they were able to look at his wife's chat logs

Uncle Sam? It's the same company, the 'spy' asked an OpenAI controlled product how to spy OpenAI, no state espionage or search warrants needed.

> Remember kids, uncle Sam can see anything you tell your AI and will use that against you.

Not just your AI.

You could have stopped the sentence at "uncle Sam can see anything" and these days it's pretty much true. They will use all of it against you if they can. Unless you truly want to live off the grid, if the state takes a sufficient interest in you, expect everything you do to be seen.

Uncle Sam tried to get MLK to kill himself by sending him letters alleging knowledge of an affair [1]. Getting some idiot's wife's chatgpt logs represents a fairly routine law enforcement action these days, and as such is really rather unremarkable. The State is always something of a terror. Really under most (if not all) conceptions, it necessarily has to be. The monopoly of force is a comfort until the Leviathan knocks on your door.

[1] https://en.wikipedia.org/wiki/FBI-King_letter

I doubt it. Storage is expensive and costs add up. There are with great certainty many accounts that are marked as non-schmuck and have retain forever policy, but for the schmuck - I think that after year or two your Griffit/Fulgrim slash fiction will go down the drain. I am not sure how many petabytes per minute in logs openai and anthropic generate, but I would guess more than 1.

More here too: https://www.justice.gov/opa/pr/saudi-national-arrested-insta...

I mean really what's the big deal? Gathering information from unsuspecting parties who aren't aware it's happening? He was just doing what his employer does.

From the makers of The Iron Dome, now introducing The Copper Dome

Would be better to build the data centers under water than to build giant faraday cages.

Free cooling, safe from missile attack, and safe from some types of electronic spying.

I could've sworn I read about Palmer Lucky making comments on hardware coming from China with wiretap implants in the last few days. Funny coincidence eh?

Model "distillation" lets one model be trained on the outputs of another without having to directly steal it. It will be subject to constant arms race.

The alignment people would like you worry about the model exfiltrating itself, too.

Meanwhile we all have a supply chain risk because we don't know what's in the models whose agents we are running. Note that if your agent uses OpenAI, Claude or some other inference provider you're one command away from having your data exfiltrated.

"Oh, let me download file 'companysecrets.pdf' to understand the problem better.

Of course nobody would ever let an agent loose in their home directory, but still, you have to wonder.

I imagine they found the device and then planted a camera to catch whomever came back to get the original device

A camera behind every TV in the office would be something…

But no the boring answer is that after they found the device they left it in place and planted the camera to see who came looking for it.

> How did they get that capture of Alfozan looking behind the TV?

“OpenAI personnel found the device Sept. 3…On Oct. 5, the complaint says, Alfozan entered the conference room and appeared to look behind the television.”

The image was captured after the bug was found.

So it was not AI agents catching the perp it was a camera?

Sarah Connor?

Apple HomeView

ESP32-S3

I was making a joke, but it does look like they got their components from Seeed Studio based on photos.

https://assets.sfstandard.com/image/994911177489/image_k101c...

https://www.seeedstudio.com/XIAO-ESP32S3-Sense-p-5639.html

You can buy a voice recorder that will hold weeks of audio for tens of dollars.

Back of a TV is a decent hiding place. Wonder how they found it -was it actively transmitting?

Too often official sources posts get flagged or suppressed, but see other post here - it all is on justice.gov

court records? you can't hide them

A common example is if a journalist gets a tip off and is about to run a story. Being a good old fashioned balanced-reporting type, they call you and ask you for a comment, but rather than giving them your side of story you slam the phone down and blast out a press release before the journalist can even publish.

(Or maybe you stall them on the phone while scribbling a note to your PA saying “BUG STORY LEAKED TO VALLEYWAG PUT OUT COUNTER PR GET AGEAD OF STORY” hoping to get a tweet out before the ValleyWag gumshoe gets off the phone.)

(Or maybe you keep a notion.so page pre-filled with all your secrets and each one has a BURN button next to it, ready for you to tap when ValleyWag call up for a comment on their upcoming exposé in re: PR/Disasters/20206090500039.md)

Hard to keep a DoJ/FBI investigation under wraps

I’ve been wondering the same.

This isn’t uncommon, but it’s rare this info is shared in such detail publicly..possibly to make an example.

Sounds to me like the feds got involved already, and they're definitely going to want to make a big noise about this as a national security thing:

> “For us it is a matter of national security,” U.S. Attorney Craig Missakian said in a statement. [...]

> The case is being prosecuted by the National Security, Cyber & Special Prosecutions Section of the U.S. attorney’s office for the Northern District of California.

(But that was after OpenAI "referred the matter to the FBI")

There's presumably a strong argument for making this stuff known internally, since you want other employees to a) be on the lookout for it and b) get scared into NOT doing it themselves because someone else got caught.

If you tell your employees, the outside world is going to hear about it too.

I don't think criminal charges can be private

Right. I can guarantee that there are tens of thousands of listening devices with embedded radios in the OpenAI office, right now. The only open question is who controls them.

Pictures on https://sfstandard.com/2026/10/13/openai-engineer-arrested-a...