$6 500 bounty for this is a joke. The black market price would be smth like $6 500 000 or more
Per the article, that's the price OpenAI is willing to pay for an exploit that covers any account or integration one connects to their OpenAI account. Let that sink in.
I don't think the other commenters mentioning how server-side vulnerabilities aren't as lucrative in the black market are making that connection.
Yes. And that's why, if you are in the bug bounty business it is important to focus on companies that understand security and pay well and not on wannabe slave owners like this one. No pay - no audit.
That's why people like doing bad things. It pays. Why do you think movies like using this single theme over and over again? It's always happening
I also thought that's crazy. Why even bother for these kind of bounties.
There is probably no black market for this at all.
https://news.ycombinator.com/item?id=43025038