OpenAI 将漏洞赏金提高至最高约 17.2 万美元
Bug hunters can now earn up to $172,000 from OpenAI as company ramps up security
AI 导读
OpenAI 宣布把漏洞赏金提高至原来的四倍，并启动新的内部安全冲刺。
摘要与补充说明
ChatGPT、Codex 等核心产品的严重漏洞，外部研究者最高可获 3 万美元；特别突出的发现可达 10 万美元，加上质量、忠诚度和活动奖金，总额约 17.2 万美元。新增内容包括五档忠诚度计划和与新产品发布绑定的限时加奖活动，过去 30 天内提交漏洞报告的人将按新旧费率差额补发。同期，安全公司 Cathedral 将与 OpenAI 工程师合作对其系统进行压力测试；公司称上一次冲刺中有 25% 的产品工程师参与漏洞查找。
正文
OpenAI quadruples bug bounty payouts and launches new internal security sprint. Critical vulnerabilities in core products like ChatGPT or Codex now earn outside researchers up to $30,000, the company announced. Exceptional findings can net up to $100,000, and with quality, loyalty, and campaign bonuses, the total can reach roughly $172,000.
That puts OpenAI in the same ballpark as Google's general vulnerability rewards program, though still below the top-tier payouts Apple or Microsoft offer for OS-level exploits. New additions include a five-tier loyalty program and time-limited campaigns with boosted payouts tied to new feature launches. Anyone who reported a vulnerability in the last 30 days will get the difference between the old and new rates retroactively.
Alongside the bounty overhaul, OpenAI is preparing a security sprint where the security firm Cathedral will team up with OpenAI's own engineers to stress-test its systems. During the last sprint, 25 percent of OpenAI's product engineers worked on finding vulnerabilities, according to the company.
AI News Without the Hype – Curated by Humans
Subscribe to THE DECODER for ad-free reading, a weekly AI newsletter, our exclusive "AI Radar" frontier report six times a year, full archive access, and access to our comment section.