‹ BackHN Continuity

Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

  1. kerenskiy · · focus · HN ↗
    $6 500 bounty for this is a joke. The black market price would be smth like $6 500 000 or more
    1. tptacek · · focus · HN ↗
      There is probably no black market for this at all.

      <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43025038">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43025038

      1. kerenskiy · · focus · HN ↗
        Okay, then first download all their sources (perhaps with model weights?) and sell that. Not the bug itself
        1. tptacek · · focus · HN ↗
          Now you&#x27;re not selling a vulnerability, you&#x27;re planning a heist. That is a thing you can do!
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.