Jeffrey Ladish
@JeffLadish
Applying the security mindset to everything @PalisadeAI
加入 March 2013
1.5K 正在關注 23.3K 粉絲
If they got full access to the monorepo, that means they could have downloaded OpenAI’s entire code base
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
顯示更多
