Embroidery CEO @ZackKorman reveals why finding vulnerabilities is only half the security problem, including hackers who deliberately trigger detection only after they’re finished: "OpenAI of all companies has code vulnerabilities. But when someone is gaining access, you can detect that there is suspicious activity going on inside of your system, and you can respond to it automatically." "The Hacktron guys, in many cases they will do whatever they're gonna do to prove the intent, and then they…

S1r1u5_@S1r1u5_Sep 18

On July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc. We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵 https://t.co/gVsmQZwSc8