Jeffrey Ladish
@JeffLadish
Applying the security mindset to everything @PalisadeAI
Joined March 2013
1.5K Following 23.3K Followers
If they got full access to the monorepo, that means they could have downloaded OpenAI’s entire code base
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
Show more
