Jordan Nanos
@JordanNanos
Member of Technical Staff @SemiAnalysis_
加入 December 2017
932 正在关注 5.6K 粉丝
Maybe a lesson here is that monorepos are not just bad for productivity, they’re also a security issue when you’ve got a credential cascade going on
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
显示更多
