‹ BackHN Continuity

Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

  1. redox99 · · focus · HN ↗
    It's crazy that we still rely on these unsafe C dependencies, in an era where migrating code to Rust (or other languages) is so easy.

    There's really no excuse.

    1. cowboylowrez · · focus · HN ↗
      Its my understanding that rust just addresses memory safety, and it all falls apart at the first mention of "unsafe" or whatever the keyword is, not to mention the supply chain thing with the crates. Obviously AI makes it all moot because thats where the entire theory of basic security gets thrown out the window lol just chat with facebooks robot if you want someone elses instagram account amirite?
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.