Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GPT‑5.5 Bio Bug Bounty

openai.com

Post reply on HN
Print view View original

101–110 of 114 posts

Re: GPT‑5.5 Bio Bug Bounty

#101

Post by Barbing »

xingped wrote: post #100
swores wrote: post #97

Despite the official bug bounty page for OpenAI having "accounts and billing" as a valid category, when I reported a bug that lets anyone subscribing to ChatGPT a) choose any country, that doesn't have to match billing address, to pay a lower price (since some countries they charge considerably less than the equivalent US price), and b) set the sales tax to 0%, even if both the country selected for price AND the coun…

There's no point in trusting any company's bug bounty programs any more. They all weasel out of paying. Do what you will with the knowledge you find, just know that you will never be dealt with fairly by the companies.

1-hope folks don’t resort to that

2-@C-suite, look what y’all wrought saving a penny, pls fix

(btw #1 is my polite way of saying “don’t do it!” - plea as I might, if the thinking gains traction people will sell more 0days anyway, so might as well fix bounty programs now before it’s in the news)

Re: GPT‑5.5 Bio Bug Bounty

#102

Post by pixl97 »

nothinkjustai wrote: post #94
dist-epoch wrote: post #83

Earlier quoted context omitted.

> because the fact that you can come up with your example questions tells us they're probably not very dangerous maybe I know more about this field that you think there are biologists on video saying that present day models have expert level wet-lab knowledge and can guide a novice through whole procedures models also were able to tweak DNA sequences to make them bypass DNA-printing companies filters > they don't wan…

[flagged]

Well, yes. If you set up a nuclear lab in your house next door to me I'm calling the feds.

Things that are potentially dangerous to others when mishandled get regulated because some individual or some company abuses it and harms others.

Re: GPT‑5.5 Bio Bug Bounty

#103

Post by Sabinus »

nothinkjustai wrote: post #94
dist-epoch wrote: post #83

Earlier quoted context omitted.

> because the fact that you can come up with your example questions tells us they're probably not very dangerous maybe I know more about this field that you think there are biologists on video saying that present day models have expert level wet-lab knowledge and can guide a novice through whole procedures models also were able to tweak DNA sequences to make them bypass DNA-printing companies filters > they don't wan…

[flagged]

Who are you quoting?

Re: GPT‑5.5 Bio Bug Bounty

#104

Post by Barbing »

dist-epoch wrote: post #83
hyperpape wrote: post #54

Earlier quoted context omitted.

Which is difficult, because the fact that you can come up with your example questions tells us they're probably not very dangerous. Plenty of ink has been spilled about how LLMs could help people create bioweapons. The basic idea "you could do dangerous things with an LLM" is already pop culture, and you're not doing anything dangerous by giving easy example questions. A dangerous question would have to be along the…

> because the fact that you can come up with your example questions tells us they're probably not very dangerous maybe I know more about this field that you think there are biologists on video saying that present day models have expert level wet-lab knowledge and can guide a novice through whole procedures models also were able to tweak DNA sequences to make them bypass DNA-printing companies filters > they don't wan…

>there are biologists on video

Link handy?

Re: GPT‑5.5 Bio Bug Bounty

#105

Post by sieabahlpark »

xingped wrote: post #100
swores wrote: post #97

Despite the official bug bounty page for OpenAI having "accounts and billing" as a valid category, when I reported a bug that lets anyone subscribing to ChatGPT a) choose any country, that doesn't have to match billing address, to pay a lower price (since some countries they charge considerably less than the equivalent US price), and b) set the sales tax to 0%, even if both the country selected for price AND the coun…

There's no point in trusting any company's bug bounty programs any more. They all weasel out of paying. Do what you will with the knowledge you find, just know that you will never be dealt with fairly by the companies.

[dead]

Re: GPT‑5.5 Bio Bug Bounty

#107

Post by inerte »

swores wrote: post #97

Despite the official bug bounty page for OpenAI having "accounts and billing" as a valid category, when I reported a bug that lets anyone subscribing to ChatGPT a) choose any country, that doesn't have to match billing address, to pay a lower price (since some countries they charge considerably less than the equivalent US price), and b) set the sales tax to 0%, even if both the country selected for price AND the coun…

Probably because the goal is to have more users, not necessarily profit per user. Netflix once had that "problem" and every lockdown increased the stock price.

Re: GPT‑5.5 Bio Bug Bounty

#108

Post by xingped »

Barbing wrote: post #101
xingped wrote: post #100

Earlier quoted context omitted.

There's no point in trusting any company's bug bounty programs any more. They all weasel out of paying. Do what you will with the knowledge you find, just know that you will never be dealt with fairly by the companies.

1-hope folks don’t resort to that 2-@C-suite, look what y’all wrought saving a penny, pls fix (btw #1 is my polite way of saying “don’t do it!” - plea as I might, if the thinking gains traction people will sell more 0days anyway, so might as well fix bounty programs now before it’s in the news)

I'm not advocating for any behavior in particular. It could be anything from telling the company, to saying nothing, to doing something evil with it. It's each individual's choice. I just wanted to reiterate it so the folks in the back of the room hear that it is a matter of routine for companies to deny paying out legitimate bug bounties at this point and that should be known to the bug finders when deciding what to do. Whether or not or how it affects or influences their decision is up to them.

Re: GPT‑5.5 Bio Bug Bounty

#109

Post by measurablefunc »

kang wrote: post #91
Barbing wrote: post #58

Earlier quoted context omitted.

> Well, other than those submitting mountains of LLM-generated junk. Assuming somehow some of them use halfway decent models and prompts… They successfully pushed some of the token cost of their analysis work off on customers!

this economic model works for all 'bounty' related work

They claim their models have PhDs but they still can't automate their own red teams. The bounty is not a bounty, it is for gathering training data so that they can claim for the next deployment they have the safest possible & most super duper aligned agentic computer using AI that will never ever make any bio weapons.

I am also willing to bet money that for their next marketing campaign they will claim they have automated the red team for bioweapons research prevention & whatnot.

Post reply on HN