Alex Stamos
@alexstamos
This is unpopular but correct. Modern bug bounty participants have gotten spoiled by super chill responses to CFAA violations (like this one) and the whole edifice is a house of cards. Wanna know why OpenAI asked for detailed logs? Google “Sullivan + Misprision of a Felony”
Tal Be'ery@TalBeerySec · Sep 201/ Unpopular opinion: When you find a 0-day in a public service, you do RD (Responsible Disclosure), not LM (Lateral Movement).
The GitHub PR in the @OpenAI repo was a bridge too far (IMHO)
The GitHub PR in the @OpenAI repo was a bridge too far (IMHO)
Open quoted post →
12 161