Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

larodi · 1789714684 · focus · HN ↗
It is super amazing that 3 years later, none of the models' weights developed by Anthropic or/and OpenAI have leaked so far. Not a single one.
Windows internal builds have leaked for years, early game versions, GTA videos, secret documents, whatnot. But somehow even though all the whistleblowing, not a single model was leaked. What level of security do these companies have? Do they bring encrypted DVDs to AWS to run the services or really...how's it even possible?
1. hnlmorg · 1789716228 · focus · HN ↗
  People working at OpenAI have stock options. People working at MS and Rockstar do not.
  Leaking negatively affects investment while the “whistleblowers” are largely just saying “our tech is too good” which increases investment into those companies.
  Ultimately, it always comes down to money.
  1. lostmsu · 1789842432 · focus · HN ↗
    MS absolutely has a couple of stock-based incentives.

Unofficial Hacker News client; not affiliated with Y Combinator.