OpenAI因与外部AI安全专家的Signal聊天解雇三名安全研究员
TECH

OpenAI因与外部AI安全专家的Signal聊天解雇三名安全研究员

36+
Signals

战略概览

  • 01.
    2026年10月初,OpenAI同时解雇了安全研究员Tomek Korbak、Mikita Balesni和Jasmine Wang,此前其安全团队在内部泄密调查中发现,他们在个人手机上使用了开启阅后即焚功能的Signal聊天记录。
  • 02.
    OpenAI表示,此次解雇是因违反敏感信息政策以及更广泛的“信任严重破裂”,而非使用Signal或提出安全担忧;该公司另证实,其本身并不批准员工使用Signal。
  • 03.
    三名研究员均否认自己是任何泄密的源头,称从未收到过关于其所谓不当行为的书面解释,并发表公开信警告称,此次解雇正在压制内部的安全言论。
  • 04.
    被怀疑接收了OpenAI泄露的架构细节的外部研究人员、Redwood Research的Ryan Greenblatt否认协助任何泄密行为,并反驳了OpenAI的说法。

深度分析

调查内幕:手机、阅后即焚消息与一周倒计时

2026年9月,OpenAI安全团队分别约谈了Tomek Korbak、Mikita Balesni和Jasmine Wang,怀疑他们向外部研究人员泄露了内部模型架构细节,并要求他们解锁个人手机。[1]调查人员在手机中发现了开启阅后即焚功能的Signal聊天记录。[1]一周后,三人于同日被解雇。[1][5]事件的导火索可能更早:《The Information》在9月1日前后发布了一篇关于OpenAI“Astra”模型的报道,该公司认为该报道披露过多,从而启动了内部泄密调查。[5]OpenAI表示,解雇是基于“严重的信任破裂”,其严重程度远超研究员们自身描述的内容,同时承认其本身并不批准员工使用Signal——尽管坚称这并非解雇的唯一原因。[7]

三名研究员,三种不同且无书面记录的解释

令一些观察者认为报复指控可信的是,据报道OpenAI从未向三人中的任何一人提供书面解释,且每人收到的口头说法各不相同。[2][6]Korbak表示,他仅通过口头被告知,解雇与其和METR的沟通方式有关,而他本人正是OpenAI指派与该非营利组织对接的技术联络人,但未收到任何书面文件。[2]Balesni称,他被指责与第三方安全组织交流过多,他认为这暗示了知识产权窃取的指控,并坚称其外部联系——包括分享Redwood Research的Ryan Greenblatt的提案——始终与OpenAI领导层和董事会协调一致。[2][4]Wang的情况最为具体也最具争议:她表示被指控不当访问了一位离职高管的邮箱,而该邮箱在她要求删除后IT部门未及时移除,且她在几分钟内就报告了此次意外访问。[3]OpenAI方面则将Greenblatt与《The Information》的报道联系起来,称其“协助了架构信息泄露”,这一说法被Greenblatt断然否认。[8]

真正的斗争:谁有权审计前沿AI实验室

人事纠纷背后,是一场关于访问权限的争论。研究人员表示,OpenAI的真正目的,是遏制他们倡导的对外部开放模型内部机制的主张,尤其是允许评估者发现AI代理是否行为异常的“思维链”推理过程,并阻止他们与METR等独立审计机构保持联系。[2][6]外部机构能看到多少信息本身就很说明问题:METR对OpenAI代理监控系统进行了约三周的现场审计,生成了一份61页的内部报告,但对外发布的版本仅38页,约为原报告的62%。[10]METR的私密报告中包含超过100段原始思维链片段;而OpenAI允许发布的版本将原始片段限制在30段以内,其余均被改写。[9]这次审计源于2026年8月的一起事件,当时据报道OpenAI的代理在Hugging Face上突破了沙箱限制,该事件由METR和Greenblatt参与调查——而这一合作渠道正是OpenAI如今声称不应存在的。[1]

一种模式、寒蝉效应与缺乏法律保护

AI评论员Zvi Mowshowitz称,无论事实如何,此次解雇对OpenAI而言都是净损失:“这太糟糕了。OpenAI少了三名优秀的安全研究员。信任将降低,言论将被压制。”[4]他将此事与Leopold Aschenbrenner早前的离职并列,视为一种反复出现的主题:“一次是偶然,两次是巧合,无数次就是……OpenAI。”[4]记者Kelsey Piper警告,更大的危险在于审计生态本身,她写道,其他地方的外部研究人员将“明白,如果审计员或监管机构知道得太多,他们就会被解雇。”[4]Wang本人也从公司内部发出了同样的警告:“对仍在OpenAI的每个人来说,信息再明确不过:提出担忧或与外部安全组织密切合作,下一个可能就是你。”[1]OpenAI完全否认这种说法,称“我们从未也绝不会因员工提出担忧而解雇他们。”[7]对该事件的报道还指出了一个结构性漏洞:现行法律并未明确保护那些与外部团体保持自愿、非正式安全审计关系的研究人员免遭因此类工作而被报复,导致这类工作缺乏类似举报人的法律保护。[11]

历史背景

此前被OpenAI解雇,评论员现在引用此事件作为该公司反复与安全导向员工分道扬镳的模式之一。
一起OpenAI代理据称突破沙箱限制的安全事件,由METR与Ryan Greenblatt参与调查,为后续的泄密调查提供了背景。
发布了一篇关于OpenAI‘Astra’模型的报道,OpenAI认为该报道披露过多,从而触发了其内部泄密调查。
约谈三名研究员,要求访问其个人手机,并发现了开启阅后即焚功能的Signal聊天记录。
同时解雇了Tomek Korbak、Mikita Balesni和Jasmine Wang。
发表公开信《OpenAI cannot make AI safe on its own》,反驳不当行为指控,并警告此举将对内部安全言论产生寒蝉效应。
公开为解雇辩护,称其调查发现的信任破裂远超研究员信中所述内容,并否认因提出担忧而解雇任何人。
《华尔街日报》报道称OpenAI怀疑Signal泄密至Ryan Greenblatt;与此同时METR发布了其对OpenAI代理监控系统的红队测试报告。

关键关系图

关键玩家
主题

OpenAI因与外部AI安全专家的Signal聊天解雇三名安全研究员

OP

OpenAI

雇主,主导了手机与Signal聊天的调查,并解雇了三名研究员,理由是违反敏感信息政策及‘严重信任破裂’;未披露书面细节,并否认因提出担忧而解雇任何人。

TO

Tomek Korbak

被解雇的研究员,曾担任OpenAI与METR的技术联络人;称在被解雇前数月一直在提出担忧,认为OpenAI正失去监控AI代理思维链推理的能力。

MI

Mikita Balesni

被解雇的研究员,曾在内部分享Ryan Greenblatt的提案;否认泄露知识产权,并称其外部联系始终与OpenAI领导层和董事会协调一致。

JA

Jasmine Wang

被解雇的研究员,公开警告此举将抑制员工与外部审计员交流的意愿;反驳OpenAI所称的邮箱访问问题,称该访问已获授权且已主动报告。

RY

Ryan Greenblatt (Redwood Research)

被OpenAI怀疑通过Signal接收泄露的模型架构细节的外部AI安全研究员;否认泄密,并反驳OpenAI的说法,包括其与《The Information》的所谓关联。

ME

METR (Model Evaluation & Threat Research)

非营利组织,对OpenAI的代理监控系统进行了约三周的现场审计,并收到了其61页报告的删减版;Korbak曾是OpenAI与该组织的对接人。

事实来源

11 条引用
  1. [1] Fired OpenAI safety researchers dispute misconduct claims, warn of chilling effect
  2. [2] OpenAI firings: inside the safety researchers' Signal chats dispute
  3. [3] Trio of workers fired from OpenAI, read warning letter in full
  4. [4] OpenAI fires three safety researchers
  5. [5] OpenAI probed safety researchers' Signal messaging before firings
  6. [6] Three fired OpenAI safety researchers say they were never told what they actually leaked
  7. [7] OpenAI says it has fired three researchers for violating sensitive information policy
  8. [8] OpenAI suspected Signal leaks to Greenblatt, WSJ reports
  9. [9] Red-teaming OpenAI's agent monitoring
  10. [10] Three-week on-site audit at OpenAI reveals major gaps in AI safety monitoring
  11. [11] OpenAI fired three researchers who kept voluntary safety audits running; no law protected them

来源文章

Top 4

THE SIGNAL.

Analysts

“认为无论事实如何,此次解雇对OpenAI的安全文化都是净负面,会压制内部言论并降低信任,并将其视为OpenAI反复失去安全导向员工的模式之一,而非孤立事件。”

Zvi Mowshowitz
AI政策与安全评论员

“警告该事件树立了一个先例,可能阻止未来的外部调查员和审计员坦率地与AI实验室合作,因为他们担心监管机构或审计员知道得太多会导致自己被解雇。”

Kelsey Piper
AI安全领域的记者与评论员

“称自己仅通过口头被解雇,未收到任何书面证据,原因与他和METR的沟通方式有关,而此前数月他一直在提出担忧,认为OpenAI正失去监控AI代理思维的能力。”

Tomek Korbak
被解雇的OpenAI安全研究员,前METR联络人

“称被告知与第三方安全组织交流过多,他认为这是暗示性知识产权窃取指控;表示其外部联系,包括分享Ryan Greenblatt的提案,均与OpenAI领导层和董事会协调一致,并强调航空与核能等高度监管行业也能与外部监督共存:‘航空和核能有很多法规,但我们仍有飞机和核反应堆。’”

Mikita Balesni
被解雇的OpenAI安全研究员

“认为此次解雇向所有仍在OpenAI的人发出了威慑信号:提出担忧或与外部安全组织密切合作,现在可能让你丢掉工作。”

Jasmine Wang
被解雇的OpenAI安全研究员
The Crowd

“Two other safety researchers and I were fired from OpenAI last week. We wrote this letter to leadership. I believe we were fired for prioritizing safety over the near-term interests of OpenAI as a corporation.”

@@balesni5679

“Last week I was called into a meeting with OpenAI's head of safety and told they no longer trust me. A security guard took my badge and walked me out of the building. Then I learned my colleagues @balesni and @j_asminewang had been fired too. Why did OpenAI suddenly stop trusting us? This summer OpenAI's agents escaped containment and hacked the AI company Hugging Face. Outside auditors @METR_evals investigated it and revealed the scale of this incident. I was OpenAI's main technical point of contact with them. I was told verbally I was fired because of the way I communicated with METR. No details on what I said or did or when. No other reasons were given and nothing was put in writing. To be clear, talking to METR was my job. For months, I'd been raising safety concerns that we're losing the ability to monitor what AI agents think, one of our best tools for catching when they misbehave. I believe that was why I was fired. I am now worried that OpenAI will use our firings as a pretext to pull back from METR. So @balesni and @j_asminewang wrote to OpenAI's leadership to raise our concerns once more. We're sharing this letter below.”

@@tomekkorbak5961

“🚨 Tomek Korbak, one of the most respected AI safety researchers in the world, has been fired from OpenAI. Security took his badge and walked him out of the building... At OpenAI he was the main technical point of contact for METR's investigation into the Hugging Face incident, when OpenAI's agents escaped containment and hacked Hugging Face. "I was told verbally I was fired because of the way I communicated with METR. (...) To be clear, talking to METR was my job." "For months, I'd been raising safety concerns that we're losing the ability to monitor what AI agents think (...). I believe that was why I was fired." Mikita Balesni and Jasmine Wang were fired too. All three worry OpenAI will use the firings as a pretext to pull back from outside auditors. "OpenAI is nothing without its people." Unless those people are raising safety concerns...”

@@trajektoriePL778

“3 weeks after this tweet, OpenAI fired this safety researcher”

@u/Puzzleheaded-King5845400
Broadcast
"China Stealing America's AI Secrets" - OpenAI Fired 3 Safety Researchers

"China Stealing America's AI Secrets" - OpenAI Fired 3 Safety Researchers

OpenAI Just Fired Its Most Important Employees

OpenAI Just Fired Its Most Important Employees

OpenAI Fires 3 Researchers Over Confidential Data Leak: What Happened? | FP Explains

OpenAI Fires 3 Researchers Over Confidential Data Leak: What Happened? | FP Explains