Thread

1. nullbio · 1789709536 · focus · HN ↗

   This is legal to do without written permission? $6,500 for this feels like peanuts. The potential reach of such a hack is insane, especially with access to Github. OAI is lucky they were ethical and didn't sell this for several hundred thousand to a malicious third party.

   1. r00bot · 1789709913 · focus · HN ↗

      It depends who you're hacking, where they're based, where you're based, and what you do. If you're extremely careful not to break any of the rules it can be completely legal, as it was in this case. Many jurisdictions make it completely illegal. I agree that $6,500 is a pittance.

      1. NonHyloMorph · 1789714665 · focus · HN ↗

         And so they told the world ¯\_(ツ)_/¯
      2. teaearlgraycold · 1789714752 · focus · HN ↗

         Well OpenAI is a small garage startup, it’s probably all they could manage.
   2. VectorLock · 1789715633 · focus · HN ↗

      $3500 when you consider they returned $3000 of that back to OpenAI in the form of burnt tokens.
   3. rplnt · 1789725340 · focus · HN ↗

      [dead]

   4. monster_truck · 1789725536 · focus · HN ↗

      If you read the article, you will see this was within the acceptable scope listed on OAI's bug bounty program.

Unofficial Hacker News client; not affiliated with Y Combinator.