跳到正文
实时
The Decoder· Maximilian Schreiner·· 11 天前

OpenAI 将 Bug 悬赏奖金翻四倍并启动新安全冲刺

Bug hunters can now earn up to $172,000 from OpenAI as company ramps up security

要点速览

OpenAI 将核心产品如 ChatGPT 或 Codex 的关键漏洞悬赏奖金提高至最高 30,000 美元,卓越发现最高 100,000 美元,加上质量、忠诚度和活动奖金,总额可达约 172,000 美元。

正文

OpenAI quadruples bug bounty payouts and launches new internal security sprint. Critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, the company announced. Exceptional findings can net up to $100,000, and with quality, loyalty, and campaign bonuses, the total can reach roughly $172,000.

That puts OpenAI in the same ballpark as Google's general vulnerability rewards program, though still below the top-tier payouts Apple or Microsoft offer for OS-level exploits. New additions include a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will get the difference between the old and new rates retroactively.

Alongside the bounty overhaul, OpenAI is preparing a security sprint where the security firm Cathedral will team up with OpenAI's own engineers to stress-test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.

AI News Without the Hype – Curated by Humans

Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.

来源: The Decoder · the-decoder.com