‹ BackHN Continuity

Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

  1. kerenskiy · · focus · HN ↗
    $6 500 bounty for this is a joke. The black market price would be smth like $6 500 000 or more
    1. tptacek · · focus · HN ↗
      There is probably no black market for this at all.

      <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43025038">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=43025038

      1. Mohansrk · · focus · HN ↗
        curious, the bug allows dumping private repositories of openai, that sure has black market right?
        1. akerl_ · · focus · HN ↗
          What criminal enterprise does getting private OpenAI repos fit into?
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.