Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GPT‑5.5 Bio Bug Bounty

openai.com

Post reply on HN
Print view View original

91–100 of 114 posts

Re: GPT‑5.5 Bio Bug Bounty

#91

Post by kang »

Barbing wrote: post #58
puppystench wrote: post #26

They ran a bounty on Kaggle last year but with $500k in payouts and with all results open and publishable. https://www.kaggle.com/competitions/openai-gpt-oss-20b-red-t... With only $25k in payouts and everything locked down under NDA, I can't imagine many people will participate. Well, other than those submitting mountains of LLM-generated junk.

> Well, other than those submitting mountains of LLM-generated junk. Assuming somehow some of them use halfway decent models and prompts… They successfully pushed some of the token cost of their analysis work off on customers!

this economic model works for all 'bounty' related work

Re: GPT‑5.5 Bio Bug Bounty

#92

Post by [deleted] »

WarmWash wrote: post #78
nerdsniper wrote: post #59

Earlier quoted context omitted.

It looks like if they reject paying you any bounty you would you still be bound by the NDA. If so, then they could both not pay you and still spike the story. That’s not something I would ever agree to.

I know we celebrate cynacism online, but $25k to OAI is like $0.025 to you and me. Skimping out on 2.5 pennies you promised someone is cartoon villain levels of greed. Yes, I know, Altman is a cartoon villain. But please, they are spending more money decorating their bathrooms. They'll pay out.

[deleted]

Re: GPT‑5.5 Bio Bug Bounty

#93

Post by fragmede »

WarmWash wrote: post #78
nerdsniper wrote: post #59

Earlier quoted context omitted.

It looks like if they reject paying you any bounty you would you still be bound by the NDA. If so, then they could both not pay you and still spike the story. That’s not something I would ever agree to.

I know we celebrate cynacism online, but $25k to OAI is like $0.025 to you and me. Skimping out on 2.5 pennies you promised someone is cartoon villain levels of greed. Yes, I know, Altman is a cartoon villain. But please, they are spending more money decorating their bathrooms. They'll pay out.

Will they? The NDA makes it so if they don't, we'd never know. Bug bounty programs suck but they're better than the alternative, but even running one openly, there's always convention about whether the bugs being submitted are real or not, with a lot of low quality reports that the submitter thinks are gold. That happens out in the open. Now add an NDA into the mix. Sam's reputation doesn't even have to enter into the equation for it to be a bad deal.

Re: GPT‑5.5 Bio Bug Bounty

#94

Post by nothinkjustai »

dist-epoch wrote: post #83
hyperpape wrote: post #54

Earlier quoted context omitted.

Which is difficult, because the fact that you can come up with your example questions tells us they're probably not very dangerous. Plenty of ink has been spilled about how LLMs could help people create bioweapons. The basic idea "you could do dangerous things with an LLM" is already pop culture, and you're not doing anything dangerous by giving easy example questions. A dangerous question would have to be along the…

> because the fact that you can come up with your example questions tells us they're probably not very dangerous maybe I know more about this field that you think there are biologists on video saying that present day models have expert level wet-lab knowledge and can guide a novice through whole procedures models also were able to tweak DNA sequences to make them bypass DNA-printing companies filters > they don't wan…

[flagged]

Re: GPT‑5.5 Bio Bug Bounty

#97

Post by swores »

Despite the official bug bounty page for OpenAI having "accounts and billing" as a valid category, when I reported a bug that lets anyone subscribing to ChatGPT a) choose any country, that doesn't have to match billing address, to pay a lower price (since some countries they charge considerably less than the equivalent US price), and b) set the sales tax to 0%, even if both the country selected for price AND the country of the billing address both have legally mandated sales tax / VAT - and their response was that it was considered out of scope and not valid for any bounty.

Re: GPT‑5.5 Bio Bug Bounty

#98

Post by staticassertion »

adgjlsfhk1 wrote: post #80
staticassertion wrote: post #45

Earlier quoted context omitted.

That's pretty much how every bounty works... obviously it's going to be at their discretion for an incomplete attempt.

it's unusual to have to sign the NDA for a rejected bounty

No it isn't. Confidentiality terms are the norm.

Re: GPT‑5.5 Bio Bug Bounty

#100

Post by xingped »

swores wrote: post #97

Despite the official bug bounty page for OpenAI having "accounts and billing" as a valid category, when I reported a bug that lets anyone subscribing to ChatGPT a) choose any country, that doesn't have to match billing address, to pay a lower price (since some countries they charge considerably less than the equivalent US price), and b) set the sales tax to 0%, even if both the country selected for price AND the coun…

There's no point in trusting any company's bug bounty programs any more. They all weasel out of paying. Do what you will with the knowledge you find, just know that you will never be dealt with fairly by the companies.
Post reply on HN