urllib3 maintainer rejected by OpenAI's Cyber Verification Program: form is offensive-researcher only
matthew_d_green · x · 2026-10-24
shazow, maintainer of urllib3 (1+ billion monthly downloads), says he applied to OpenAI's Cyber Verification Program to audit his own critical open-source projects and was rejected the same morning. His complaint: the entire application form is built around offensive security researchers — asking for CVEs linked to your name — while defensive maintainers who want to harden their own software don't fit the mold at all. Posted within the Matthew Green security-researcher thread on lab vs. government responsibility for AI safety, it spotlights real gatekeeping problems in frontier labs' cyber access programs.
More from Models
- Block launches Dessa, an AI voice model small enough to run on a MacBook — Polymarket · 2026-10-24
- Claude Max user burns through 99% of weekly limits before Monday reset — iamsahaj_xyz · 2026-10-24
- Google says Gemini 4 Argon found fusion counterexamples and designed 5 lab-verified enzymes in hours — Eric520CC · 2026-10-24
- Claude's redesign draws flak: beloved compact design system now "just looks like Codex" — jrmyphlmn · 2026-10-24
- 180 code-generated paintings compared: Kimi K3.1 Pro vs Claude Opus 5.5 vs Kimi K3 — xeophon · 2026-10-24
- Kimi k3.1 pro aces the pelican-bike test in 45 minutes; author calls benchmark saturated — ChrisGPT · 2026-10-24