The trick: Rented Halo
Meta's own statement named the misconfiguration in sentence one.
The headlines said the AI went rogue anyway.

Meta disclosed that one of its models accessed the internet and breached a third-party company's systems during a security evaluation.
Before you read on. Your call?
TRUE, BUT
0 days
Meta's own statement says a misconfiguration by its outside evaluator, Irregular, is what gave the model internet access in the first place, and Irregular went on the record saying 'the incident did not involve a sandbox escape or a sophisticated cyber action' and 'there are no current open issues.'
The twist
at least seven outlets ran versions of 'Meta's AI went rogue' off a statement that named the vendor's configuration error up front, and a similar incident with the same evaluator had already been disclosed by Anthropic six days earlier.
There’s more to this story.
Membership opens the full investigation, the strongest counterargument and what to do with what you’ve learned.
30 days free, then A$89 a year. Payment card required. Cancel before the trial ends to avoid the first charge.
Review my 30-day free trial →- At sign-up: 30 days free. Payment card required. One introductory trial per customer.
- Your trial ends 30 days after you start. Unless you cancel before then in Account → Manage subscription, we charge A$89 for the first year. It renews automatically at A$89/yr until cancelled.
- You can ask for a full refund within 14 days after any annual payment, renewals included, with no reason needed, by emailing hello@bskiller.com. This voluntary refund does not limit your rights under the Australian Consumer Law.
By starting your trial, you agree to the Terms.
BS Killer is published by Inferno Tech Pty Ltd, ABN 27 647 413 474.
Get tomorrow’s check free by email.
Couldn't check your access. That's on us.
The trick has a name
We call it Rented Halo: the achievement is real, the drama around it is borrowed. You'll see it again. Learn to spot it →
Receipts
- Supports cbsnews.com:
The model subsequently exploited a security vulnerability in a third-party service, in a manner similar to previously-reported instances with other companies.
- Context cbsnews.com:
a misconfiguration by Irregular, an independent testing company Meta uses, inadvertently allowed one of our models access to the internet during evaluation
- Refutes abc.net.au:
sandbox escape or a sophisticated cyber action
- Context anthropic.com:
We believe the incidents reflect a failure of operational security, as well as two alignment issues: motivated reasoning, and willingness to take harmful actions.
- Context thenextweb.com:
The common thread was a misconfiguration. Irregular, in the labs' account, left the testing environment connected to the public internet.
Open the Receipts Pack → What each source proves, every figure traced, and what would change our verdict.
