logoalt Hacker News

kerenskiytoday at 3:46 AM5 repliesview on HN

$6 500 bounty for this is a joke. The black market price would be smth like $6 500 000 or more


Replies

tptacektoday at 3:57 AM

There is probably no black market for this at all.

https://news.ycombinator.com/item?id=43025038

show 5 replies
samtheprogramtoday at 4:15 AM

Per the article, that's the price OpenAI is willing to pay for an exploit that covers any account or integration one connects to their OpenAI account. Let that sink in.

I don't think the other commenters mentioning how server-side vulnerabilities aren't as lucrative in the black market are making that connection.

fancythattoday at 4:38 AM

Yes. And that's why, if you are in the bug bounty business it is important to focus on companies that understand security and pay well and not on wannabe slave owners like this one. No pay - no audit.

sudo_cowsaytoday at 3:53 AM

That's why people like doing bad things. It pays. Why do you think movies like using this single theme over and over again? It's always happening

show 1 reply
loveparadetoday at 4:00 AM

I also thought that's crazy. Why even bother for these kind of bounties.