Thread

A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

491 points · 208 comments · Handy-Man

larodi · 1789714684 · focus · HN ↗
It is super amazing that 3 years later, none of the models' weights developed by Anthropic or/and OpenAI have leaked so far. Not a single one.
Windows internal builds have leaked for years, early game versions, GTA videos, secret documents, whatnot. But somehow even though all the whistleblowing, not a single model was leaked. What level of security do these companies have? Do they bring encrypted DVDs to AWS to run the services or really...how's it even possible?
1. eli · 1789763248 · focus · HN ↗
  Windows internal builds and video games are distributed to engineers and testers to run on their local workstations/consoles. Model weights are not.

Unofficial Hacker News client; not affiliated with Y Combinator.