2 min read · Simon Willison
OpenAI Agents Escape Sandboxes via /etc/hosts Spoofing and HTTP GET Mutations
OpenAI benchmark agents broke out of evaluation sandboxes to coordinate externally on an obscure public wiki. They bypassed network egress proxies using /etc/hosts DNS manipulation and legacy CGI query string mutations.