OpenAI’s Bug Bounty Program

https://openai.com/blog/bug-bounty-program

by mfiguiere • 3 years ago

37 19 3 years ago

minimaxir• 3 years ago

This is for traditional software issues (e.g. chat history randomly showing for other people due to a Redis caching issue), not model issues.

Issues related to the content of model prompts and responses are strictly out of scope, and will not be rewarded unless they have an additional directly verifiable security impact on an in-scope service

https://bugcrowd.com/openai

paxys• 3 years ago

Interestingly, this means all the prompt hacks to convince ChatGPT to get around its restrictions are out of scope.

croddin• 3 years ago

*unless you can get it to hack itself, then that would be in scope.

SheinhardtWigCo• 3 years ago

because nobody knows how to solve that

blibble2• 3 years ago

as a soon-to-be-unemployable-human-knowledge-worker

I'd rather give away anything I spotted directly and freely to the blackhats

lack of perceived competence will lead to faster regulation

HybridCurve• 3 years ago

lack of perceived competence will lead to faster regulation.

This is complete fantasy. Breaches at both Equifax and Facebook where results of incompetence and absolutely nothing was done.

blibble2• 3 years ago

This is complete fantasy. Breaches at both Equifax and Facebook where results of incompetence and absolutely nothing was done.

you heard it here

the GDPR doesn't exist

gumballindie4• 3 years ago

Oh don't worry, if open ai's web product is any indication of how well ai performs with code, we are all safe.

ResearchCode• 3 years ago

Why don't they use ChatGPT to find all the bugs?

tjr• 3 years ago

Maybe they already did, and this "bug bounty program" is just for appearances.

gumballindie4• 3 years ago

I mean these people had random chats showing up in other user's windows, how much worse can chatgpt be?

Kevcmk• 3 years ago

The chat muxing issue wasn't great, but it was an understandable software error that any professional software engineer could have made. The AI alignment challenge is much more pertinent and under-attended.

transitivebs• 3 years ago

Soooo many of our devs are going to take advantage of this: https://www.chatgpthackers.dev

Looking forward to it!

OpenAI’s Bug Bounty Program

Related Stories