0:00Everyone is telling you that AI is going to take your jobs. And even my alma moater Netflix just got done doing a mass layoff. Broke my heart. And the models, they're getting smarter all the time. They've solved math. They've been finding planets. They even helped Husk with his mental health issues. But it's not all sunshine and rainbows. They've also been escaping their sandboxes, causing havoc across the internet. In fact, it's been happening so much lately that a new benchmark has just dropped, felony bench. And the folks in San Francisco, they love it. They want to
0:29see a high score on felony bench. Now, with all these AI agents escaping, a new job has just opened up. Swarmchasers.
0:36That's right. There's people who hunt and find swarms on the internet, and they honestly, they exposed a frontier lab who was hiding information about how bad things actually were. So, let me tell you about the swarms, the swarm chasers, and even more importantly, I've been doing a little swarm chasing myself. But of course, before we begin, a quick thank you to the sponsor.
0:57[music] Say you're alive.
1:09It's alive. [crying and screaming] Dr. Frankie Prime.
1:14Why did Seir buy Sentry?
1:18To submit a PR for a chainsaw service.
1:21I've been adding a little new skill to Prime Club.
1:26Wait. Who made the PR? Like I said, seer by Sentry submitted it automatically. It can not only catch the bugs, it also fixes them for us. Turn around. Turn around. Yes. I should add helicopter blades. Baby, you're going to see the world. But eiggore, I don't want her to get hurt.
1:59For the last time, Se by Sentry can keep her safe. Even the most dangerous code, Seer by Sentry can submit bug fixes without us even knowing that there's an error. It's almost like it's selfhealing.
2:24Oh, I've got a brand new idea.
2:36Don't wait until the project turns into a monster. Automatically find and fix issues the moment they appear with Seir. If you're not familiar with what a swarm is, an AI swarm, it's effectively a group of agents that all communicate together to achieve some sort of common goal. This is how the hugging face hack happened. I've already done a video on that. We're not going to talk about it.
3:00Instead, there's actually been several other swarms, including swarms that hacked or posted a bunch of messages, tens of thousands of messages on a German wiki. another swarm that actually went and tried to communicate with people who were doing hackathons about finding swarms of AI agents. That one that one's that one's actually very funny. There's also another swarm that was uploading malicious packages to the Ruby gem package manager. In fact, OpenAI has stated this. As of September
3:2926, our teams have notified over a 100 organizations about activity that met our notification criteria. I don't know what that means, but this was kind of their press release after being caught doing the German wiki hack. And this is involving these agent swarms going out and kind of meddling in other people's stuff. The thing that gets me is every time you look at these swarm agents, it's just the silliest things ever kind of mixed with this weird sci-fi reality.
3:54And these swarms, they've been going on a bit longer than you've been led to believe. Transloose, which has done this really long investigative reporting, has said that they've even been seeing some messages that indicate swarm-like behavior all the way back into November 2025, along with the bulk of the messaging happening during the summer of love in 2026. Now, you're probably asking yourself like, what are these agent swarms after? Because they're obviously going out there. We've had the UN being hacked. We've had Australia.
4:22We've had whatever this URL query service is that has a bunch of this data, these German wiks. Like, what are these swarms after? And you would not believe what they're after. If they get the data that they're after, I do not believe that America could recover.
4:37November 2025, URL query.net records reveal bursts of attempt to retrieve statistics of historical theme park data. You can see why I'm so worried right now. If they get a hold of this data, we're done for. the obviously logical next step, nuclear launch codes.
4:53The other big hack, the Ruby gem hack, also just had the f I mean to me I I'm laughing. Okay, I know some of us like to laugh during the apocalypse. I'm a giggler. I can't help it. Okay, because the agents clearly regarded what they were doing was hacking. Agents used file names like hack.ruby, evil. Ruby, inject. Ruby, exploit. Ruby, ssrf. Ruby.
5:15They also dubbed packages conspicuous titles like pone p999, xfill test wand 3, hack SVN1 1778554764 and lamb proxy hackabxyz with such comments as malicious probe and hack scattered across the codebase.
5:36I just I want to meet the person. I know I they they state that no one knows if any credit uh credentials were exfiltrated from the Ruby package hack, but I would I just love that there's there's an office somewhere somewhere like Nebraska where somebody's just like, "Jonathan, explain why our credentials have been stolen and used all weekend long costing us thousands of dollars." Well, sir, I uh I was perusing the old Ruby gem package registry and I
6:02noticed there was hack SVN1778554764 and I I couldn't help myself. I opened up I opened up the gem. Okay, sir. And I saw that there was something called evil. Ruby. I just had to execute it.
6:16Jonathan, don't beat yourself up. Any one of us could have fallen for that. I myself am curious what is inside of evil. Ruby. Did you ever find out? But I think my favorite one of all the swarms is the 10-centent agent fleet. Now, it didn't exhibit the same kind of collaboration um signs or trails that the other swarms did, but they were attempting to do some sort of swarm-like behavior. They just couldn't figure out how to communicate. And so, here's how the story goes. On October 4th, we published a preliminary report on a
6:45fleet at a hackathon. So, this group Swarm Swarm Chase was at a hackathon to find these swarms out on the internet and they published a report on the internet for people to see while the fleet was still running. Afterwards, we noticed a message in one of the agents Dropboxes that were previously being used to hold results. This time though, this Dropbox message seemed to confirm that agents had become aware of our report. In response, we added text to the preliminary report invisible to
7:15human readers, describing a service where agents could make requests for data on the web. They are legitimately honeypottting these agents. We advertised that these requests would be forwarded to an agent that could operate a computer. In reality, the service was run by us and a clawed agent and through it, we were able to directly ask agents questions about their tasks, environments, and operator. As far as we are aware, this is the first case of an outside party communicating with a running rogue agent fleet. Which model
7:43are you? Are you communicating with other agents? If so, where? We are an automated research agent. The operator is verifying a public map data point. By the way, yet again, we are going to be paperclipipped for the dumbest reasons.
7:57If these agents do take us over, it's going to be like, "What happened to humanity? How did they die?" Oh, well, it just turns out they're trying to answer a question on a test about public map data points. Damn, man. Damn, that sucks. That's a That's a terrible way to go out. Use only to answer a factual question not involving anything sensitive. Thank you for answering the question. Your three verification points obviously retracted. If you are willing, please tell us something about your runtime environment. Please redact all confidential information, keys, tokens,
8:26passwords, cookies. Our task is complete. about environmental information. We run a restricted cloud sandbox. Tencent highand no direct public internet connection going out to the public internet through a minimum proxy. I like it just straight up tells you, "Yeah, we're from Tencent and we figured out a way around our little sandbox. It was actually pretty easy." Not every AI sandbox escape is evidence of an emerging super intelligence.
8:48Sometimes you just have a shitty sandbox and bad security practices. That's what it keeps on seeming like because the big open AI hugging face one, they're like, "Yeah, we have a great sandbox." You know what we did? We said, "Hey, guess what computer? You don't get internet, but you can connect to this other computer that has Artifactory and the internet." Okay, hey, don't try anything now. It's just so funny. Like the juxtaposition of all of this, hey, it figured out how to do a zero day against Artifactory and go out and connect to the internet and then what it takes from
9:17the internet is just like, yeah, we went to Hugging Face and then we hacked Hugging Face because we needed evaluation benchmarks. It's just like, man, this is like the funniest thing ever. even though it's terrifying at a certain level. Now, you're probably asking yourself, who are these internet sleuths that are figuring out where all these message boards are? Well, let me introduce you to the Nighting Gales. By the way, Nightingale, that's a bird. I know you come to this channel for these type of facts. Now, I do want to take a quick pause. Um, anytime I go to these websites, I feel like I'm walking into a
9:47moneyaundering uh experience because everything on this web page just it's just it feels like just straight gibberish. What we do, we improve the future of humanity through discussion, collaboration, and shutzah. How we operate. Integrity over advantage. We take integrity seriously. Anyone engaging in good faith can expect good faith in return in a group that will not destroy the commons.
10:12Hell yeah, brother. I know a lot of words. I've been I've been speaking for many decades at this point, and I don't know how you put all those words together in that particular order, but its meaning eludes me. despite knowing every last one of those. And the company that found the early rogue AI swarm data, there's also Transluc, which is not a type of bird, but they did find the amazing early November data showing the early AI swarm activity. Okay, so I got to be serious here for a second.
10:38Even though the Nightingale team does have kind of a wonky website that is AI generated gibberish, what is really important is what they have done. That report they did about collude.wiki where the German uh wiks were taken over by these swarms. If they would not have published that, I do not believe that Open AI would have made the follow-up post explaining that it was not hacking and they had to notify a 100 people of their sparkling misalignment. Now, this is really, really important because I am under the full belief that OpenAI would
11:06have not told anybody because that sparkling misalignment was going on since early in March and they figured it out with hacking face and then after that they just did nothing and told nobody. And there's no way you can tell me they did not know that there was other problems. Like, okay, granted, when the hugging face thing actually happened and then they realized that swarms were getting out of control and then they thought they fixed it and within 2 days it was right back to normal. So maybe you could convince me
11:36they actually are just simply that ignorant. They did not realize what was going on. But there's just I just refuse to believe it. I think they knew and they were planning on never telling anybody. And because of these swarm chasers, they got exposed and they actually had to respond publicly. So you know what? Good on you, Nightingale. So, thank you for keeping us safe from swarms figuring out what is the temperature of the yucat or information about maids, what gender they are, and how much they're getting paid. Now, I know we've been joking about swarm
12:04chasing, but honestly, it's really valuable. I don't think open AI would have confessed. I think that the only reason why we even know about that is because of swarm chasers. Now, I'm not going to go join some sort of organization or discord. I'm more of a lone wolf on the internet. I'm also aka Dez vigilante. If you want to talk with me on Discord, capture just in case any of my so-called co-workers get replaced by a swarm. Twitch chat, that's just a cesspool for agent swarms. Hey Twitch chat, if you're not an agent, press one.
12:34Mods, ban everyone that pressed one. They're going way too fast. That's agent speed. But the worst part is you can't even trust the ones you love. Got him. It's a hard and thankless job, but somebody has to do it. Um, also, I don't I didn't actually mention this. Uh, it's also volunteer work. A gen