This is possibly the scariest thing I have ever read
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
8
602
Paypig activity lol
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
188
My key takeaway from this is that OpenAI is confident that Pwn2Own will still be a thing in 948 years
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
OpenAI says an autonomous vulnerability pipeline validated and generated patches for 948 Linux kernel local privilege escalation bugs, at $1,213,430 in API credits, or about $1,279 each.
xitter-newx.xyz-mikolabs.workers.dev/OpenAI/status/21181194…
xitter-newx.xyz-mikolabs.workers.dev/OpenAI/status/21181194…
🤖 Made with AI
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
1
25
xitter-newx.xyz-mikolabs.workers.dev/OpenAI/status/21181194…
המספרים פה מספרים סיפור של מירוץ שהעלות של השתתפות בו יכולה לרדת משמעותית בהינתן מודלים מותאמים ונטולי מגבלות.
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
26
Woah
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
164
🙏
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
45
this is legit free money for openAI. just launch this at everything and collect the bounty.
mind you they make a margin of 90-95% on apis, so their real cost is around 90k. so they effectively make over 100x by doing this.
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
4
452
OpenAI out here re-discovering "impose cost" from first principles. 🤪
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
1
1
95
Lol 😂
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
4
3,954
lol
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
4
23
5,741
Time tested business model
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
3
436
actually did the same experiment using grok and got a similar factor model cost to bounty value.
The full run cost $1,213,430 in API credits—about $1,279 per distinct local privilege escalation vulnerability.
For context, applying historical Pwn2Own and TyphoonPWN bounty rates gives a hypothetical value of $18.9M–$66.3M.
This demonstrates the relative efficacy of using AI models for securing software—defenders should proactively analyze software to make cyber attacks cost-prohibitive.
2
122