logoalt Hacker News

rootsudo • today at 2:00 PM • 3 replies • view on HN

I don't understand, how are people using codex for this sort of research? Whenever I try to do bug bounty, research, etc it locks down and I have the "blue" tier access/daylight whatever it's called.

For example I tried to investigate some CVE's on older android roms and it downright was refusing it. It was okay when doing it on... Microsoft and to submit a microsoft bug bounty but android was no go.


Replies

torben-friis • today at 2:20 PM

I think "I want to do stuff to hardware I own", without potential for remote anything, is probably a much easier sell.

ChaseRensberger • today at 2:21 PM

no shortage of answers to this question but the common/short explanation is

- it says codex but not what model, it could have been an abliterated model or something more open to this sorta thing

- convince the model youre not doing the thing youre doing (a bunch of ways to go about this, some short and some long)

its probably possible to convince any model to do any thing if youre clever enough about your approach, kinda just the way this stuff works. General intelligence = infinite ways to direct it.

also tbh it coulda just been fine with it since the user owns the hardware and phrased it in a non malicious way.