OpenAI, the creator of sensational chatbot ChatGPT, on Tuesday, announced that it is offering a monetary reward of up to $20,000 to its users who can spot and report the vulnerabilities present in its artificial intelligence systems.

The OpenAI Bug Bounty programme went live on Tuesday and announced that the monetary rewards will be handed over to people on the basis of the severity of the bugs reported by them. The rewards will start from $200 and will vary on the size of the bugs uncovered.

ALSO READ | <a href="https://www.wionews.com/technology/openais-chatgpt-blocked-in-italy-reports-577685">OpenAI’s ChatGPT blocked in Italy over alleged privacy violations</a>

It will range from $200 for “low-severity findings” to $20,000 for “exceptional discoveries”.

The company said the programme is being rolled out because it believes “transparency and collaboration” are important for finding vulnerabilities present in its technology.

“This initiative is an essential part of our commitment to developing safe and advanced AI,” read the blog post by Matthew Knight, OpenAI’s head of security. “As we create technology and services that are secure, reliable and trustworthy, we would like your help,” he added.

Bug bounty programmes are often used by technology companies to encourage ethical hackers and programmers to report the bugs present in their software systems.

As per the details shared on the bug bounty platform Bugcrowd, researchers have been invited by OpenAI to review ChatGPT's certain functionality and the framework of the way in which the systems developed by OpenAI communicate and share data with third-party applications.

The programme does not include malicious or incorrect content produced by OpenAI systems.

The programme doesn't come as a surprise because recently president and co-founder of OpenAI, Greg Brockman, had tweeted that OpenAI had been “considering starting a bounty programme” or network of “red-teamers” to spot weak spots.

The comments were made by him in response to a post written by a 22-year-old jailbreak prompt enthusiast, Alex Albert. Albert's website includes written prompts which help to break the safeguards of chatbots like ChatGPT.

WATCH | ChatGPT creator OpenAI CEO mulling to open office in Japan

<div class="videoWrapper trancodeVideo"><iframe allowfullscreen="" autoplay="1" class="includeVideo" frameborder="0" height="350" src="https://www.wionews.com/videos/chatgpt-creator-openai-ceo-mulling-to-open-office-in-japan-581371/embed" style="width:100%;max-width:560px;" width="560"></iframe></div>

“Democratised red teaming is one reason we deploy these models,” wrote Brockman.

The announcement comes days after Italy banned ChatGPT alleging a breach of privacy rules by the platform and prompting regulators from different European countries to closely study generative AI services.

ChatGPT, developed by Microsoft Corp-backed OpenAI, took the world by storm after it was launched in November and has left many users amazed with its quick responses to the questions asked and caused distress to some with its inaccuracies.

(With inputs from agencies)

You can&nbsp;now write for wionews.com&nbsp;and be a part of the community. Share your stories and opinions with us&nbsp;<a href="https://www.wionews.com/content-contribution-registration-form">here</a>. 
 
&nbsp;

WATCH WION LIVE HERE

<iframe allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" frameborder="0" height="350" src="https://www.wionews.com/live-tv/embed?autoplay=1&amp;mute=1" width="100%"></iframe>

OpenAI, the creator of sensational chatbot ChatGPT, on Tuesday, announced that it is offering a monetary reward of up to $20,000 to its users who can spot and report the vulnerabilities present in its artificial intelligence systems.

OpenAI, the creator of sensational chatbot ChatGPT, on Tuesday, announced that it is offering a monetary reward of up to $20,000 to its users who can spot and report the vulnerabilities present in its artificial intelligence systems. The OpenAI Bug Bounty programme went live on Tuesday and announced that the monetary rewards will be handed over to people on the basis of the severity of the bugs reported by them. The rewards will start from $200 and will vary on the size of the bugs uncovered. ALSO READ | OpenAI’s ChatGPT blocked in Italy over alleged privacy violations It will range from $200 for “low-severity findings” to $20,000 for “exceptional discoveries”. The company said the programme is being rolled out because it believes “transparency and collaboration” are important for finding vulnerabilities present in its technology. “This initiative is an essential part of our commitment to developing safe and advanced AI,” read the blog post by Matthew Knight, OpenAI’s head of security. “As we create technology and services that are secure, reliable and trustworthy, we would like your help,” he added. Bug bounty programmes are often used by technology companies to encourage ethical hackers and programmers to report the bugs present in their software systems. As per the details shared on the bug bounty platform Bugcrowd, researchers have been invited by OpenAI to review ChatGPT's certain functionality and the framework of the way in which the systems developed by OpenAI communicate and share data with third-party applications. The programme does not include malicious or incorrect content produced by OpenAI systems. The programme doesn't come as a surprise because recently president and co-founder of OpenAI, Greg Brockman, had tweeted that OpenAI had been “considering starting a bounty programme” or network of “red-teamers” to spot weak spots. The comments were made by him in response to a post written by a 22-year-old jailbreak prompt enthusiast, Alex Albert. Albert's website includes written prompts which help to break the safeguards of chatbots like ChatGPT. WATCH | ChatGPT creator OpenAI CEO mulling to open office in Japan “Democratised red teaming is one reason we deploy these models,” wrote Brockman. The announcement comes days after Italy banned ChatGPT alleging a breach of privacy rules by the platform and prompting regulators from different European countries to closely study generative AI services. ChatGPT, developed by Microsoft Corp-backed OpenAI, took the world by storm after it was launched in November and has left many users amazed with its quick responses to the questions asked and caused distress to some with its inaccuracies. (With inputs from agencies) You can now write for wionews.com and be a part of the community. Share your stories and opinions with us here. WATCH WION LIVE HERE

OpenAI offers up to $20,000 bounty for finding bugs in its chatbot ChatGPT

Kanishk Sajnani did not receive so much as a thank you from a major Indian airline when he contacted them with alarming news - he had hacked their website and could book flights anywhere in the world for free.

It was a familiar tale for India&#39;s army of &quot;ethical hackers&quot;, who earn millions protecting foreign corporations and global tech giants from cyber attacks but are largely ignored at home, their skills and altruism misunderstood or distrusted.

India produces more ethical hackers -&nbsp;those who break into computer networks to expose, rather than exploit, weaknesses -&nbsp;than anywhere else in the world.

The latest data from BugCrowd, a global hacking network, showed Indians raked in the most &quot;bug bounties&quot; -&nbsp;rewards for red-flagging security loopholes.

Facebook, which has long tapped hacker talent, paid more to Indian researchers in the first half of 2016 than any other researchers.

Indians outnumbered all other bug hunters on HackerOne, another registry of around 100,000 hackers. One anonymous Indian hacker - &quot;Geekboy&quot; -&nbsp;has found more than 700 vulnerabilities for companies like Yahoo, Uber and Rockstar Games.

Most are young &quot;techies&quot; -&nbsp;software engineers swelling the ranks of India&#39;s $154-billion IT outsourcing sector whose skill set makes them uniquely gifted at cracking cyber systems.

&quot;People who build software in many cases also understand how it can be broken,&quot; HackerOne co-founder Michiel Prins told AFP by email.

But while technology behemoths and multinationals are increasingly reliant on this world-class hacking talent, just a handful of Indian firms run bug bounty programs.

Information volunteered by these cyber samaritans is often treated with indifference or suspicion, hackers and tech industry observers told AFP.

Anand Prakash, a 23-year-old security engineer who has earned $350,000 in bug bounties, said Facebook replied almost immediately when he notified them of a glitch allowing him to post from anyone&#39;s account.

&quot;But here in India, the email is ignored most of the time,&quot; Prakash told AFP from Bangalore where he runs his own cyber security firm AppSecure India.

&quot;I have experienced situations many times where I have a threatening email from a legal team saying &#39;What are you doing hacking into our site?&#39;&quot;

Sajnani, who has hacked around a dozen Indian companies, said he was once offered a reward by a company that dropped off the radar once the bugs were fixed.

&quot;Not getting properly acknowledged, or companies not showing any gratitude after you tried to help them, that is very annoying,&quot; the 21-year-old told AFP from Ahmedabad, where he hunts for software glitches in between his computer engineering studies.

Attitudes changing

An unwillingness to engage its homegrown hackers has backfired spectacularly for a number of Indian startups, forcing a long-overdue rethink of attitudes toward cyber security.

In 2015, Uber-rival Ola launched what it called a &quot;first of its kind&quot; bounty program in India after hackers repeatedly exposed vulnerabilities in the hugely-popular app.

This month Zomato, a food and restaurant guide operating in 23 countries, suffered an embarrassing breach when a hacker stole 17 million user records from its supposedly secure database.

The hacker &quot;nclay&quot; threatened to sell the information unless Zomato, valued at hundreds of millions of dollars, offered bug hunters more than just certificates of appreciation for their honesty.

&quot;If they were paying money to the good guys, maybe &#39;nclay&#39; would have reported the vulnerability and made the money the right way,&quot; Waqas Amir, founder of cyber security website HackRead, told AFP by email.

The incident was especially galling for Prakash. He had hacked Zomato&#39;s database just two years earlier, and said if they listened to him then &quot;they would never have been breached in 2017.&quot;

In a mea culpa rare for an Indian tech company, Zomato agreed to launch a &quot;healthy&quot; bounty program and encourage other firms to work with ethical hackers.

&quot;We should have taken this more seriously earlier,&quot; a Zomato spokeswoman said in a statement to AFP.

The Zomato hack, and panic surrounding this month&#39;s global WannaCry cyber attack, comes as the Indian government aggressively denies suggestions its massive biometric identification program is susceptible to leaks.

The government has staunchly defended its &quot;Aadhaar&quot; program, which stores the fingerprints and iris scans of more than one billion Indians on a national database, and has accused those who have raised concerns of illegal hacking.

Prakash said it was vital the government embrace its own through a programme like the &quot;Hack the Pentagon&quot; initiative, which last year saw 1,400 security engineers invited to poke holes in the US Department of Defense&#39;s cyber fortifications.

&quot;The Indian government definitely needs a bounty programme to make their system more secure,&quot; Prakash added.

(AFP)

Indians rake in the most bug bounties for red-flagging security loopholes

Kanishk Sajnani did not receive so much as a thank you from a major Indian airline when he contacted them with alarming news - he had hacked their website and could book flights anywhere in the world for free. It was a familiar tale for India's army of "ethical hackers", who earn millions protecting foreign corporations and global tech giants from cyber attacks but are largely ignored at home, their skills and altruism misunderstood or distrusted. India produces more ethical hackers - those who break into computer networks to expose, rather than exploit, weaknesses - than anywhere else in the world. The latest data from BugCrowd, a global hacking network, showed Indians raked in the most "bug bounties" - rewards for red-flagging security loopholes. Facebook, which has long tapped hacker talent, paid more to Indian researchers in the first half of 2016 than any other researchers. Indians outnumbered all other bug hunters on HackerOne, another registry of around 100,000 hackers. One anonymous Indian hacker - "Geekboy" - has found more than 700 vulnerabilities for companies like Yahoo, Uber and Rockstar Games. Most are young "techies" - software engineers swelling the ranks of India's $154-billion IT outsourcing sector whose skill set makes them uniquely gifted at cracking cyber systems. "People who build software in many cases also understand how it can be broken," HackerOne co-founder Michiel Prins told AFP by email. But while technology behemoths and multinationals are increasingly reliant on this world-class hacking talent, just a handful of Indian firms run bug bounty programs. Information volunteered by these cyber samaritans is often treated with indifference or suspicion, hackers and tech industry observers told AFP. Anand Prakash, a 23-year-old security engineer who has earned $350,000 in bug bounties, said Facebook replied almost immediately when he notified them of a glitch allowing him to post from anyone's account. "But here in India, the email is ignored most of the time," Prakash told AFP from Bangalore where he runs his own cyber security firm AppSecure India. "I have experienced situations many times where I have a threatening email from a legal team saying 'What are you doing hacking into our site?'" Sajnani, who has hacked around a dozen Indian companies, said he was once offered a reward by a company that dropped off the radar once the bugs were fixed. "Not getting properly acknowledged, or companies not showing any gratitude after you tried to help them, that is very annoying," the 21-year-old told AFP from Ahmedabad, where he hunts for software glitches in between his computer engineering studies. Attitudes changing An unwillingness to engage its homegrown hackers has backfired spectacularly for a number of Indian startups, forcing a long-overdue rethink of attitudes toward cyber security. In 2015, Uber-rival Ola launched what it called a "first of its kind" bounty program in India after hackers repeatedly exposed vulnerabilities in the hugely-popular app. This month Zomato, a food and restaurant guide operating in 23 countries, suffered an embarrassing breach when a hacker stole 17 million user records from its supposedly secure database. The hacker "nclay" threatened to sell the information unless Zomato, valued at hundreds of millions of dollars, offered bug hunters more than just certificates of appreciation for their honesty. "If they were paying money to the good guys, maybe 'nclay' would have reported the vulnerability and made the money the right way," Waqas Amir, founder of cyber security website HackRead, told AFP by email. The incident was especially galling for Prakash. He had hacked Zomato's database just two years earlier, and said if they listened to him then "they would never have been breached in 2017." In a mea culpa rare for an Indian tech company, Zomato agreed to launch a "healthy" bounty program and encourage other firms to work with ethical hackers. "We should have taken this more seriously earlier," a Zomato spokeswoman said in a statement to AFP. The Zomato hack, and panic surrounding this month's global WannaCry cyber attack, comes as the Indian government aggressively denies suggestions its massive biometric identification program is susceptible to leaks. The government has staunchly defended its "Aadhaar" program, which stores the fingerprints and iris scans of more than one billion Indians on a national database, and has accused those who have raised concerns of illegal hacking. Prakash said it was vital the government embrace its own through a programme like the "Hack the Pentagon" initiative, which last year saw 1,400 security engineers invited to poke holes in the US Department of Defense's cyber fortifications. "The Indian government definitely needs a bounty programme to make their system more secure," Prakash added. (AFP)

India's ethical hackers rewarded abroad, ignored at home

bug-bounty

Bug Bounty, News on Bug Bounty, stories on Bug Bounty, articles on Bug Bounty, Bug Bounty stories at Wion, Bug Bounty news, Bug Bounty latest news