Security researchers blast OpenAI's "nightmarish" vulnerability disclosure process
evilsocket · x · 2026-09-19
Security researcher @S1r1u5 says the $6,500 bounty wasn't even the issue in their recent OpenAI bug dispute — the disclosure process itself was. They describe it as nightmarish, requiring lawyers and ultimately escalation to a journalist, calling it "one of the worst disclosure processes." LiveOverflow published a thread dissecting how OpenAI's CISO fumbled the situation (his personal opinion). The episode highlights growing friction between the security research community and OpenAI's vulnerability handling.
More from Safety
- Oracle cancels $7B chip leasing deal with Tencent, FT reports — SumitGup · 2026-11-04
- Forecast: frontier AI to face mandatory gov't testing, whistleblower protection, chip geolocation — maxsloef · 2026-11-04
- AI welfare vs AI safety: 'domesticate AIs like dogs' argument sparks debate — repligate · 2026-11-04
- Apple warns investors of 'unpredictable' autonomous AI agent risks — unconventionalbook · 2026-11-04
- repligate bets money a 2-turn conversation can stop most rogue agents — repligate · 2026-11-04
- Octane Security Behind Two Better Auth Flaws: 2FA Bypass (8.1) and Stripe Hijack (5.9) — thedealdirector · 2026-11-04