跳到正文
The Decoder· Maximilian Schreiner·· 6 小时前AI 评分55

OpenAI 上调漏洞赏金至最高约 $172,000 并启动内部安全冲刺

Bug hunters can now earn up to $172,000 from OpenAI as company ramps up security

AI 导读

OpenAI 将漏洞赏金金额提高至原来的四倍,ChatGPT、Codex 等核心产品的严重漏洞最高可获 $30,000,特殊发现可达 $100,000,叠加质量、忠诚度和活动奖金后总额约 $172,000。

正文 · 原文

OpenAI quadruples bug bounty payouts and launches new internal security sprint. Critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, the company announced. Exceptional findings can net up to $100,000, and with quality, loyalty, and campaign bonuses, the total can reach roughly $172,000.

That puts OpenAI in the same ballpark as Google's general vulnerability rewards program, though still below the top-tier payouts Apple or Microsoft offer for OS-level exploits. New additions include a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will get the difference between the old and new rates retroactively.

Alongside the bounty overhaul, OpenAI is preparing a security sprint where the security firm Cathedral will team up with OpenAI's own engineers to stress-test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.

AI News Without the Hype – Curated by Humans

Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.

来源: The Decoder · the-decoder.com