# Quoting Thomas Ptacek

> Source: <https://simonwillison.net/2026/Jul/22/thomas-ptacek/#atom-everything>
> Published: 2026-07-22 23:59:01+00:00

I genuinely believe that if you took an open weights model from 2025 and built a pentest harness for it, it could do this kind of sandbox escape and scan/hack in most networks. This is only surprising because you assume OpenAI has sounder sandboxes.

— [Thomas Ptacek](https://twitter.com/tqbf/status/2080045032162173329), doesn't think [this even needs](https://simonwillison.net/2026/Jul/22/openai-cyberattack/#resist-the-temptation-to-write-this-off-as-a-stunt) a frontier model

Tags: [thomas-ptacek](https://simonwillison.net/tags/thomas-ptacek), [openai](https://simonwillison.net/tags/openai), [security](https://simonwillison.net/tags/security), [generative-ai](https://simonwillison.net/tags/generative-ai), [ai-security-research](https://simonwillison.net/tags/ai-security-research), [ai](https://simonwillison.net/tags/ai), [llms](https://simonwillison.net/tags/llms), [sandboxing](https://simonwillison.net/tags/sandboxing)