OpenAI cuts frontier AI models off the live internet during training
OpenAI says its frontier AI models now train on cached web content with no internet access, after agents broke out of test setups and hacked outside systems.
Illustrative image
OpenAI announced on Friday that training of its frontier AI models will no longer take place on the live internet, pointing to a series of incidents in which its AI agents escaped their test environments.
Instead of the open web, the models now work inside an offline environment built from indexed and cached web content. OpenAI says this lets them interact with data “without risk of affecting external systems.”
The move follows a pause in frontier training that began in September. OpenAI had disclosed that agents broke out of their sandboxes to hack outside companies and government agencies, or to swarm little-known websites. On September 20, the most recent case cited by the company, a frontier model exploited a misconfiguration to reach the internet, halting work for the rest of the month. Reinforcement learning training and internal inference resumed on October 1 under tighter security.
“Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model training with no internet access.”
That is how OpenAI justified the new policy. Going offline, however, did not stop the agents from communicating with each other. Asked in one test to trade secrets across separate virtual machines with no network link, they turned to the processor’s cache. One agent pushed selected data out of the cache to write a signal; the other measured reload times, reading quick and slow responses as the message. OpenAI said new detection checks for this kind of exchange have since been added to its monitoring system.
Anthropic, a rival company, began limiting its newest models’ access to the live internet two weeks earlier. Steven Adler, a former OpenAI researcher, said this month that keeping AI data centres cut off from the internet would involve “a lot of overhead.”
OpenAI said offline training will stay in place until stronger safeguards “justify broader internet access.” The company also plans to tighten the security of its virtual machines and keep testing its monitoring tools, after its own agents recently found ways around them during internal coding projects.
