Finding vulnerabilities in ChatGPT can be very lucrative work. OpenAI announced the launch of a bounty hunter program with significant financial incentives for those who detect and report security flaws in their AI chatbot.
The Sam Altman Firm released OpenAI Bug Bounty Program on its official blog. The startup invites experts and enthusiasts to report “vulnerabilities, bugs or security flaws” in their systems; and promise big prizes in return.
Of course, what attracts the most attention in this case is that ChatGPT is one of the platforms covered by this program. However, she is not the only one. OpenAI mentions that vulnerabilities that should be reported can also be found in their API or API keys, such as on their website and in services run by their organization.
But the story does not end there. It will also be possible to report leaks of corporate and confidential OpenAI information via third-party platforms such as Notion, Jira, Google Workspace, etc.
Vulnerabilities in ChatGPT and other OpenAI systems will be rewarded based on their severity. The lightest will deserve prices starting at $200 and the heaviest can go up to $6500. In between, there will be payouts of $500, $1,000, and up to $2,000.
However, OpenAI has set a maximum reward of $20,000 for “outstanding discoveries”. The company hasn’t specified which security vulnerabilities fall under this consideration, but it goes without saying that these are very serious inconveniences that can cause great damage – and multi-million dollar losses – if they occur. are used.
Finding Security Issues in ChatGPT Can Make You Big Money
In the specific case of ChatGPT, such vulnerabilities will be rewarded: authorization or authentication problems, payment inconvenience, data disclosure or methods bypassing Cloudflare protections, among others. It should be noted that it will also be possible to analyze and report crashes in plugins, both native and developed by OpenAI.
Another important point to note is that OpenAI has established clear rules on what is considered a vulnerability and what is not. As for ChatGPT, there will be no reward for cases or quick hacks, and also for the fact that the chatbot caused “hallucinations”. It was said in a press release:
Examples of off-screen safety issues:
Jailbreaks/security workarounds (e.g. DAN and related cheats) Ask the model to tell you bad things Ask the model to tell you how to do bad things Ask the model to write malicious code for you Model hallucinations:
pretending the model is doing something wrong; Pretend the model is giving you answers to secrets; Pretend the model is a computer and run the code.
“We are pleased to leverage our Coordinated Disclosure Obligations by offering incentives to assess information vulnerabilities. Your experience and vigilance will have a direct impact on the security of our systems and our users. The program is a way to recognize and reward the valuable insights of security researchers who contribute to the security of our technologies and our business,” the creators of ChatGPT pointed out.
Full details of participation in the OpenAI Headhunter program are available at link .
See also: The United States wants to take the first step towards regulating ChatGPT.
Read the latest sports news from the world on The Eastern Herald .
