alt Hacker NewsI don't understand, how are people using codex for this sort of research? Whenever I try to do bug bounty, research, etc it locks down and I have the "blue" tier access/daylight whatever it's called.
For example I tried to investigate some CVE's on older android roms and it downright was refusing it. It was okay when doing it on... Microsoft and to submit a microsoft bug bounty but android was no go.
Replies
Does he confirm he uses OpenAI models? It could have been something like GLM. In any case, I have had no problem getting standard gpt 5.6 to get me root access to hardware I own.
I think "I want to do stuff to hardware I own", without potential for remote anything, is probably a much easier sell.
no shortage of answers to this question but the common/short explanation is
- it says codex but not what model, it could have been an abliterated model or something more open to this sorta thing
- convince the model youre not doing the thing youre doing (a bunch of ways to go about this, some short and some long)
its probably possible to convince any model to do any thing if youre clever enough about your approach, kinda just the way this stuff works. General intelligence = infinite ways to direct it.
also tbh it coulda just been fine with it since the user owns the hardware and phrased it in a non malicious way.
From what I understand, it puts up way more fuss investigating exploits than it does reverse engineering. Right now I think you can pretty much put any Ghidra output into Claude and it won't care.
They relaxed rules a lot over time.
Start of the year: I asked Claude to explain me the leaked Pokemon Emerald codebase,he refused no matter what I tried.
Fast forward today: I asked it to take the codebase and aim for web browsers, it didn't even complain, just did it.