Hacker News new | past | comments | ask | show | jobs | submit
thatsabadlook | on: Do the math: How we took over ChatGPT accounts
Not worth the effort for a company supposedly worth a trillion dollars. The problem is oai can't afford all of its mistakes at the usual rate and they make bad press. A 100k bug could make a headline, but 5k for the same bug requires the average person to be educated enough to understand how bad these issues are.
varispeed | parent
Should be given $5-10million under NDA. No headlines.
layer8 | root | parent | next
The bounty payouts must be public in order to serve as an incentive.
varispeed | root | parent | next
That incentive works both ways. For instance employee sneaking in a security hole and then selling it to a mate so they can collect the bounty.
| root | parent
{"deleted":true,"id":50317281,"parent":50316649,"time":1793461830,"type":"comment"}
weird-eye-issue | root | parent | next
Just imagine what the press would be when somebody breaks that NDA
goodmythical | root | parent
>should be paid multiple years of a high end vuln researcher salary per single discovery

What? Why would anyone work at a company paying them that much less than they pay the contractors?