Jordan Nanos
@JordanNanos
Member of Technical Staff @SemiAnalysis_
加入 December 2017
932 正在關注 5.6K 粉絲
Maybe a lesson here is that monorepos are not just bad for productivity, they’re also a security issue when you’ve got a credential cascade going on
On July 25, we hacked OpenAI.
Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc.
We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵
顯示更多
