81–87 of 87 posts
Earlier quoted context omitted.
In practice, it sounds like you guys didn't accept this dude's valid vuln because he didn't register and sign his life away.
They just stated it was all just model hallucination, and was not in fact a valid vuln.
Earlier quoted context omitted.
Yes apparently which makes this report pretty flimsy.
Upthread, OpenAI's security team confirms it's a false report; it's a variant of the empty-prompt hallucination.
Hi all, I work on security at OpenAI. We have looked into this report and the model response does not contain outputs from any other users nor does it reflect a security vulnerability, compromise, or exploit. The original report was that submitting a message close to (but not quite) 1500 seconds to the audio transcription API would result in weird, unrelated, off-topic responses that look like they might be replies t…
Earlier quoted context omitted.
In one of the responses, it provided the financial analysis of a not well-known company with a non-Latin name located in a small country. I found this company; it is real and numbers in the response are real. When I asked my ChatGPT to provide a financial report for this company without using web tools, it responded: `Unfortunately, I don’t have specific financial statements for “xxx” for 2021 and 2022 in my training…
Did you try to ask it to provide data of the company, by explicitly invoking hallucination in the model? Right now there is no real proof, untill you confirm that the data it provided cannot be hallucinated (which could be not feisable). Also, acknowledging the response fron OpenAI staff dismissing it, would you mind sharing PoC?
Earlier quoted context omitted.
That's an exaggeration. Most industry leaders do not require NDAs, only coordinated disclosure. Mozilla's program, which has been around longer than most, doesn't. Google and Microsoft don't. Meta and Apple don't. This is water carrying, intentional or not, for a terrible practice that should be shamed, so that it doesn't become standard.
My understanding is that all Bugcrowd bounties do by default. You can shame it all you want, but you can also just publish your bugs directly. Nobody has to use the Bugcrowd platform. You don't even have to wait 45 days; I don't buy these "CERT/CC" rules.
Even among 3rd party platforms, of which there are several bigs, the NDAs are not a platform requirement, just an option for participating firms.
NDAs are not the norm. Don't mislead people who would otherwise get into this game with non-issues they need not worry over.
Earlier quoted context omitted.
My understanding is that all Bugcrowd bounties do by default. You can shame it all you want, but you can also just publish your bugs directly. Nobody has to use the Bugcrowd platform. You don't even have to wait 45 days; I don't buy these "CERT/CC" rules.
You said it was pretty standard for bug bounty programs, and I disagreed pointing to several of the largest and longest lived bug bounty programs, none of which do that, and your response is pointing out that one particular platform does it? Even among 3rd party platforms, of which there are several bigs, the NDAs are not a platform requirement, just an option for participating firms. NDAs are not the norm. Don't mis…