‹ BackHN Continuity

Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

  1. kerenskiy · · focus · HN ↗
    $6 500 bounty for this is a joke. The black market price would be smth like $6 500 000 or more
    1. fancythat · · focus · HN ↗
      Yes. And that's why, if you are in the bug bounty business it is important to focus on companies that understand security and pay well and not on wannabe slave owners like this one. No pay - no audit.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.