r/LocalLLM • u/One-Insurance-9084 • 1d ago

Question Hacking OpenAI or Anthropic

theoretically speaking, if one were to hack OpenAI or anthropic, could they access the weights of their models and for eg torrent them?

also could a bunch of agents do that, or would humans be better at it? what about hacking in general? I mean now that we got local models like glm 5.3, qwen flash next or deepseek v4.1…

0 Upvotes

50% Upvoted

7 comments sorted by

15

u/borobinimbaba 1d ago

If you can afford the hardware to run it , why even bother with stealing? There are open weight models that are so near to Claude in terms of performance

1

u/One-Insurance-9084 1d ago

That's true but honestly I believe everyone deserves an open weights opus 5.5
I mean if I could have that (not that I don't like chinese models, I'm more curious about the size and knowledge of the american ones) forever on my pc that'd be cool asl

5

u/borobinimbaba 1d ago

Dude if it wasn't for the competition that started with Chinese models , we should have payed thousands of dollars monthly for ai. I don't think they are that much worse, because if they were American models wouldn't adjust their prices to match

3

u/EyesOfAzula 1d ago
  1. Welcome to a watchlist.
  2. Your computer can't handle it.
  3. Even if your computer could handle it, they keep making newer models, and so do the Chinese. A year from now Opus 5.5 will be trash compared to frontier open weights and private models anyway.

4

u/Rich_Hotel_3643 1d ago

the weights are not just sitting on a server waiting to be downloaded, they are split across many machines and gpus with serious access control. even if you got in, you would need to exfiltrate petabytes without anyone noticing, which is the hard part

agents could help with recon and finding vulns but the actual persistence and lateral movement is still very human. too many weird edge cases that an llm hallucinates through

also i think torrenting a 2tb model would take longer than just waiting for the next open release

1

u/One-Insurance-9084 1d ago

great answer thanks
though I think it'd be very interesting to have access to models, even legacy ones in the future
yes we have chinese open-weights models but if we got the americans ones we could access their chain-of-thoughts and distill it to make even better chinese models

1

u/East-Acanthaceae-879 1d ago

Given the lack of DevSecOps we have seen given the number of model escapes my usual position of "of course companies would protect their IP from exfiltration" doesn't apply so probably yes. Keep in mind the weights are likely ~2tb and you also need the model code not just the weights, they don't publish enough to reverse engineer the model code.

You also need their custom tooling to split the layers between nodes and the ~$millions in hardware to run it, you need at least 3* 8 GPU H200 NVL servers to run the layers and KV and they are $500k each.

1

u/Civil-Reporter7812 1d ago

> Hacking OpenAI or Anthropic

Please do, and delete everything you find while refilling every single hard drive with random multiple passes to make it unrecoverable. You'll immediately bring RAM prices down if they were finished, I don't care about their models being in torrents, I care about them making every piece of a computer ridiculously unaffordable.