Jordan Nanos
@JordanNanos
Member of Technical Staff @SemiAnalysis_
Joined December 2017
932 Following 5.6K Followers
Maybe a lesson here is that monorepos are not just bad for productivity, they’re also a security issue when you’ve got a credential cascade going on
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
Show more
