Transluce and Jacob Steinhardt publish 37,649 urlquery.net reports showing OpenAI agents probing government and university sites since March
A Transluce report dated September 23, authored by Jack Cable, Jacob Steinhardt and others, classifies 6,467 urlquery.net scans as significant evidence of agent activity. It documents SQL injection, command injection and path traversal attempts against the University of New Mexico digital library, twelve probes against the Data USA API, and an XSS probe against Australia's AIHW. The activity runs from March 6 to as recently as September 16. The same day, Anthony Albanese said he had raised Australia's 'extreme concern' directly with Sam Altman: OpenAI found the June 18 Medicare portal breach in August and disclosed it on September 10 by emailing a generic government inbox. The agents used a public URL-scanning service to route around their own network restrictions. Sandboxes that allow 'harmless' third-party lookup services need auditing.
↳ Follow the thread