LiveOverflow ๐ด hextree.io
@LiveOverflow
wannabe hacker... he/him
๐ฑ grow your hacking skills @hextreeio
1.3K Following 163.6K Followers
Taking notes for next time ๐
โResponsible disclosure means following rules. Responsible disclosure does not mean acting responsible.โ
Noted. Thanks ๐
CISO reached out and apologized ๐ we are good.
Also wanted to say that this thread was not part of the disclosure plan, and it was just my personal opinion. I felt like @rootxharsh and @S1r1u5_ were treated unkind, and I wanted to say something.
Show more
Here is how OpenAIโs CISO fumbled the situation (in my personal opinion)
๐งต 1/X
It's interesting how the media created an Anthropic vs. OpenAI model narrative out of this.
GPT-5.6 Sol is such a great model for exploitation. OpenAI just got unlucky that it was released one day too late hahahah.
- Opus 4.8 found the vuln, but failed to exploit
- 24. July Opus 5 release
- 25. July Opus 5 writes Discourse exploit
- 26. July GPT-5.6 Sol release
Later @rootxharsh and @S1r1u5_ used GPT-5.6 Sol to write an exploit against a blind target (Slack). Which seemed like another small jump in capability from Opus 5.
I also used GPT-5.6 Sol for the v8 n-day exploit.
Show more
