Jordan Nanos
@JordanNanos
Member of Technical Staff @SemiAnalysis_
参加 December 2017
932 フォロー中 5.6K ファン
Maybe a lesson here is that monorepos are not just bad for productivity, they’re also a security issue when you’ve got a credential cascade going on
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
もっと見る
