‹ BackHN Continuity

Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

  1. sergiotapia · · focus · HN ↗
    They used a heif payload to get server access but they never describe the SSO flaw they used to actually get repo access (the juicy part!), bummer!

    Wish they shared that interesting piece since that's the interesting part.

    Also pretty shocking that openai uses github. I would have expected a company of that size with that much to lose would be using self hosted stuff.

    1. carstonh · · focus · HN ↗
      agreed… why can an ID token for a separate client application be used to read and write to GitHub? that’s the story here.
      1. jsiepkes · · focus · HN ↗
        Not checking the "audience" of a token or misconfiguring it is pretty common. A lot of applications don't actually check it.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.