Thread

1. rvz · 1789703337 · focus · HN ↗

   This whole blog-post is impressive with the chain of vulnerabilities involved. However...

   > OpenAI also paid us a $6,500 bounty.

   ?

   That amount for this payout is beyond pathetic for a near $1.2T company, who just got themselves breached with a complete potential source code leak.

   This is like getting close to breaching the main monorepo at Google: google3.

   If this was on the black market and the leak included unreleased models and training material, it would easily be worth tens of millions. Even reporting crypto smart contract flaw pay way more than that on average of $100k - $10M.

   Come on.

   1. sudo_cowsay · 1789703689 · focus · HN ↗

      The unfortunate truth of doing the right thing. Also, correct me if I'm wrong but there are too many bad things out there and companies can't give 1 million bounty for stuff like that. I'm sure they could but in the long run, wouldn't it be unsustainable?

      1. Shank · 1789703918 · focus · HN ↗

         How much would a nation state pay for a complete copy of OpenAI’s github repositories? I doubt there are many full chains laying around like this.

Unofficial Hacker News client; not affiliated with Y Combinator.