As I was falling asleep last night, this thought occurred to me: maybe NVIDIA bought Hugging Face so they prevent HF from litigating OAI for the hacking incident, because if OAI was very publicly sued for this kind of behavior from an agent, it could pour a massive amount of ice water on agent adoption as businesses suddenly see current agent systems as a existential business risk, and it would pop the infrastructure bubble (of which NVIDIAs entire valuation rests). The fact that somehow OAI committed a felony and have managed to pivot the public conversation around it to be aimed at regulatory capture instead of them being held legally accountable is pretty wild.
We must build the Torment Nexus, lest others build the Torment Merry-go-round, and the Torment Rollercoaster, and we would miss out on the Torment Tormentor Tormentober!
When this event happened I was confused why they didn’t file a police report and make OpenAI demonstrate in criminal court that they weren’t engaging in illegal corporate espionage and other rather felonious hacking activities intentionally.
Why did anyone take their word that it was all an accident? Why am I believing the burglar standing in my house?
Maybe because all the AI actors, probably including Hugging Face, want to push the narrative that AI companies aren’t responsible for what their agents are doing.
I think our societies will have to settle on this.
this is an article from July, I haven't heard any updates of what came out of this apart from the incident report that OpenAI released.
I presume the poster submitted this article in light of the recent AI safety discussions taking place, but as for this particular incident I haven't found an actual confirmation that $100M worth of inference was given out to the HuggingFace community.
This statement was also months prior to the acquisition by Nvidia, which again I was interested in seeing if they would still pursue this
This article is 2 months old when the event happened. And they didn't "bill them", they politely asked them on Twitter, and it looks like that went nowhere.
I wonder if it's in openai's interest to play nice here. They can't have a precedent of "the future is we do whatever we want with no consequences for screwing up" if they want public interest on their side, but they also can't have "you (our customers) will be held accountable for what you're paying us to do if we screw up." And that's before the IPO interests even come in.
This whole thing is still all too weird, the disclosing blog post and whatnot clearly shows how carefully engineered and designed it all was, it's like many thinking heads and hands touched it every step of the way. What amazing times.
and the actual tweet from the HuggingFace CEO back in July
> In the spirit of transparency, here’s what I asked @OpenAI:
> • Radical transparency: let’s release the traces from the “rogue” agents so the entire research community can study what happened.
> • More capabilities for defenders: let’s commit $100M in compute from OAI to help the Hugging Face community build powerful cyber defenses with the best open and closed models.
> The first autonomous agent cyberattack is an unprecedented event. It deserves an unprecedented response!
Clem knows they have the community support and potential legal leverage here. It's not unreasonable to ask for a lot. It's in everyone's interests to play nice. Huggingface could do a lot with more compute, even with nvidia backstop. Anything with large scale gpus quickly gets into ~year lead times, "contact sales", and complex talks. Large scale being only > 64!
As I was falling asleep last night, this thought occurred to me: maybe NVIDIA bought Hugging Face so they prevent HF from litigating OAI for the hacking incident, because if OAI was very publicly sued for this kind of behavior from an agent, it could pour a massive amount of ice water on agent adoption as businesses suddenly see current agent systems as a existential business risk, and it would pop the infrastructure bubble (of which NVIDIAs entire valuation rests). The fact that somehow OAI committed a felony and have managed to pivot the public conversation around it to be aimed at regulatory capture instead of them being held legally accountable is pretty wild.
"Let's spend 13 billion to save 100 million".
Yeah no, man, that's slumberland territory.
The line of thinking is not about that $100 million bill, it’s about all the $100 million bills that come AFTER this first one.
We must build the Torment Nexus, lest others build the Torment Merry-go-round, and the Torment Rollercoaster, and we would miss out on the Torment Tormentor Tormentober!
No, what GP was saying is "Let's spend 13 billion to save the future revenue from OpenAI and many other customers"
Sure, ok.
Why would nVidia, then, do what TFA is describing?
Finally Hugging Face is growing a pair.
When this event happened I was confused why they didn’t file a police report and make OpenAI demonstrate in criminal court that they weren’t engaging in illegal corporate espionage and other rather felonious hacking activities intentionally.
Why did anyone take their word that it was all an accident? Why am I believing the burglar standing in my house?
Maybe because all the AI actors, probably including Hugging Face, want to push the narrative that AI companies aren’t responsible for what their agents are doing.
I think our societies will have to settle on this.
I think that's too high minded.
They, like all capitalists, want to push the line "We have money, will make money, and thus, like all money makers, shouldn't be punished"
this is an article from July, I haven't heard any updates of what came out of this apart from the incident report that OpenAI released.
I presume the poster submitted this article in light of the recent AI safety discussions taking place, but as for this particular incident I haven't found an actual confirmation that $100M worth of inference was given out to the HuggingFace community.
This statement was also months prior to the acquisition by Nvidia, which again I was interested in seeing if they would still pursue this
File a police report :D
You made my day.
This article is 2 months old when the event happened. And they didn't "bill them", they politely asked them on Twitter, and it looks like that went nowhere.
Needs "July 2026" date attached to it, this is old news at this point, Hugging Face got bought by NVIDIA since this story!
The $100M for RubyGems ought to keep the servers running for several years.
I wonder if it's in openai's interest to play nice here. They can't have a precedent of "the future is we do whatever we want with no consequences for screwing up" if they want public interest on their side, but they also can't have "you (our customers) will be held accountable for what you're paying us to do if we screw up." And that's before the IPO interests even come in.
This whole thing is still all too weird, the disclosing blog post and whatnot clearly shows how carefully engineered and designed it all was, it's like many thinking heads and hands touched it every step of the way. What amazing times.
a) So, this is all from July?
b) And this is before Hugging Face agreed to acquired by NVIDIA, supplier to OpenAI?
much better techcrunch article here: https://techcrunch.com/2026/07/26/hugging-face-ceo-calls-for... (that the above post is seemingly entirely based on).
and the actual tweet from the HuggingFace CEO back in July
> In the spirit of transparency, here’s what I asked @OpenAI:
> • Radical transparency: let’s release the traces from the “rogue” agents so the entire research community can study what happened.
> • More capabilities for defenders: let’s commit $100M in compute from OAI to help the Hugging Face community build powerful cyber defenses with the best open and closed models.
> The first autonomous agent cyberattack is an unprecedented event. It deserves an unprecedented response!
https://x.com/ClementDelangue/status/2081056675558195657
Clem knows they have the community support and potential legal leverage here. It's not unreasonable to ask for a lot. It's in everyone's interests to play nice. Huggingface could do a lot with more compute, even with nvidia backstop. Anything with large scale gpus quickly gets into ~year lead times, "contact sales", and complex talks. Large scale being only > 64!
The tweet is from July. Since then, HF got bought by Nvidia for $12.9B.
That next Nvidia order just got an extra 100M service fee.
HuggingFace deserves $0 for keeping unsecure systems online.
With the left hand Nvidia takes $100 million from OpenAI, with the right hand it gives $30 billion.
Can we stop these charades? Maybe circular hacking deals are next?
AI slop article