Jeffrey Ladish
@JeffLadish
Applying the security mindset to everything @PalisadeAI
参加 March 2013
1.5K フォロー中 23.3K ファン
If they got full access to the monorepo, that means they could have downloaded OpenAI’s entire code base
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
もっと見る
