In October of this year, something unusual was noticed in an OpenAI executive meeting room: someone had secretly planted a recording device. According to a U.S. Department of Justice announcement on October 13, the person arrested was 35-year-old Saudi citizen Abdulrahman Al-Fawzan, who was an OpenAI engineer at the time; the device had been cleverly hidden inside toilet paper. Several former employees were not surprised when they heard the news.
The problems had been brewing for years, and employees warned about them for years with no one listening
Reuters, citing five people familiar with the matter, reported that as early as late 2022, before ChatGPT was launched, people had already questioned the company's security management and raised concerns with senior management and the board. Some employees felt that management's bigger priority was catching up with Google and Anthropic, while safety came second. One person familiar with the matter gave an example: anyone with code access could browse large amounts of underlying technical details unrelated to their job—the root cause being that OpenAI had long crammed most of its code into a huge system known as a "monolithic code repository." In the past, that might have been intimidating, but today AI agents can easily sort through this kind of massive information.
The tug-of-war between safety and speed is also holding back the IPO
The contradiction is this: AI has become a U.S. strategic asset, and companies are being forced to prevent technology from leaking abroad; but adding more protections slows down R&D and can even get in the way of the IPOs that OpenAI and Anthropic are planning. Former researcher DePue, who left in April, asserted that speed must not be sacrificed for safety. OpenAI spokesperson Widman pushed back, saying the company is "one of the most frequently attacked organizations in the world" and has spent heavily on defenses; the company added that its most sensitive projects have been moved into a separate repository with strict access controls, and that after appointing CISO Stuckey in October 2024, it has conducted regular tool security reviews.
Join Now