News for hackers. Stuff that matters.

A comment on ChatGPT silently passes data between connectors and the bounty wants an ID card. Parent comment

Re:ChatGPT silently passes data between connectors and the b... by lrvick on Friday November 06, 2026 @06:55PM (#50400158)
In all past bug bounty programs I started I made it clear we would only prioritize findings as serious if PGP encrypted to the security team PGP key to review offline.

The serious researchers all knew how to do this and complied and usually got paid, and the unencrypted stuff was basically always noise we never paid out on.

Probably not as much of a filter now that AI is in play though.

[ Parent | on HN ]
Re:ChatGPT silently passes data between connectors and the b... by nullc on Friday November 06, 2026 @08:41PM (#50400808)
That kind of stuff won't work anywhere near as well as a bullshit filter anymore: Most of the bullshit is AI generated and AI has no problem following rules like that-- even better than humans.

Instead, you'll need something like "you must enroll your pgp fingerprint in our system by sending a handwritten postcard featuring a tourist attraction in your region".

:P

[ Parent | on HN ]
Re:ChatGPT silently passes data between connectors and the b... by lrvick on Friday November 06, 2026 @08:56PM (#50400894)
> Instead, you'll need something like "you must enroll your pgp fingerprint in our system by sending a handwritten postcard featuring a tourist attraction in your region".

I might steal some variation of this!

[ Parent | on HN ]