ChatGPT silently passes data between connectors and the bounty wants an ID card

simonw

I assumed that the ID requirement was about sanctions compliance - OpenAI can't legally send money to someone in North Korea, for example. But https://docs.bugcrowd.com/researchers/managing-account/accou... says: > To improve platform integrity by reducing high volumes of low-quality submissions, identity verification (IDV) is now mandatory for all researchers before submitting reports to Managed Bug Bounty (MBB) programs (public and private, excluding on-demand MBBs).

kristjansson

This seems like a fundamental misunderstanding / over estimation of the guarantees OAI and MCP can offer. If 'confirmation' is a separate tool call ... it's a separate tool call. There's no scoping, there's no 'binding', nothing. When you hand control back to the model you hand control back to the model.

orf

Why did “techsoft.ye” feel the need to reply with a lengthy LLM comment that contained nothing useful at all?

cluckindan

Claude bug report and Claude reply… what is the world coming to

nekusar

The last 2 vulns I found, I sold on Tor. The companies can pay market value. Someone will. No I won't sign an NDA. No, I won't sign your obscene contract. No, I won't agree to a 90/120/180/360 day embargo. No, I don't care about your customers or shareholders. Simply put: fuck you, pay me. Or, find out.

jonstewart

Bounties do not experience desire.

ltbarcly3

"the bounty wants an ID card" classic LLM