‹ BackHN Continuity

Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

  1. fg137 · · focus · HN ↗
    Did I understand it correctly that OpenAI internal repo is accessible via public Internet?

    I would expect any company with more than a few dozen developers would host their code on prem behind a VPN, let alone a company like OpenAI which has very valuable proprietary knowledge

    1. saagarjha · · focus · HN ↗
      <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;BeyondCorp" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;BeyondCorp
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.