Now what about those millions of lines of code? Wasn’t the agent swarm supposed to take care of it?
All jokes aside this is exactly what happens as you build larger monoliths, system complexity and bug surface increases logarithmically… so in all seriousness you want to reduce LOC as much as possible. Maybe this can teach OpenAI a lesson to produce software that’s correct and adhere to established engineering standards over sensationalised “we built so much code” promotional material.
If they or their company use email "security" software that "scans" all links it's not necessarily the users fault / they don't in fact click. The mail is auto-confirmed the second it hits the inbox.
We've had to change our registration confirmation mails too recently to not confirm on GET only, but with another form - in hindsight it was stupid before but many services do that.
Oof. Together with the fact that it's possible to remotely access the file system (!) of computers ever having started a "Work" chat in the ChatGPT desktop app [1], this seems pretty bad.
Another classic OAuth implementation failure. Mismanaging the state parameter or leaking tokens via referer headers in redirects is Security 101. Wild to see this in a production environment of this scale.
99.9% of shops need a monolith with same monolith having entry points for background workers and crons.
Seasoned developers are unimpressed, or even disgusted, by the same massive piles of code.
It requires the user to click a link. But I still find this bounty very low. Others may not report them if such a small bounty is given.
> server-side vulnerabilities are worth very little, because they quickly get patched.
dont click links people
that'll be $500k for the security training pls
We've had to change our registration confirmation mails too recently to not confirm on GET only, but with another form - in hindsight it was stupid before but many services do that.
[0]: https://che01.safelinks.protection.outlook.com/?url=https%3A...
- "sign in via one-time code."
- "Click here to see our latest update".
250k refresher fee
[1] https://news.ycombinator.com/item?id=50078284
Please don't drain my $6.5 billion in Dogecoin.