Claude couldn't hack OpenAI. Then Anthropic shipped Opus 5 (thenewstack.io) 1 points by stared 4d ago ↗ HN
[–] helsinkiandrew 4d ago ↗ So it went:> HEIF upload → libheif overflow → code execution on the forum → over-permissioned SSO tokens → employee ChatGPT/Codex account → connected GitHub → pull request in openai/openaiServer side bounties aren't that profitable though:> A two-month project, under $3,000 in model tokens .... OpenAI paid Hacktron a $6,500 bounty for the account-takeover flaw on its side.The ideal hacker workflow would be to gain access to an account or system with model access which you can use for further hacks.
1 comment
[ 0.29 ms ] story [ 9.3 ms ] thread> HEIF upload → libheif overflow → code execution on the forum → over-permissioned SSO tokens → employee ChatGPT/Codex account → connected GitHub → pull request in openai/openai
Server side bounties aren't that profitable though:
> A two-month project, under $3,000 in model tokens .... OpenAI paid Hacktron a $6,500 bounty for the account-takeover flaw on its side.
The ideal hacker workflow would be to gain access to an account or system with model access which you can use for further hacks.