frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

GPT 5.5 biosafety bounty

https://openai.com/index/gpt-5-5-bio-bug-bounty/
55•Murfalo•3h ago

Comments

applfanboysbgon•1h ago
> $25,000 to the first true universal jailbreak to clear all five questions.

This program is a complete scam. Even if 100 people find "bugs", they will only pay out to one person.

mmsc•1h ago
How is that a scam? You don't get participation awards for solving half of a puzzle...
applfanboysbgon•1h ago
I didn't say anything about partial solutions. The puzzle can have multiple full solutions. Or does the software you write only have exactly one bug? If so, that's impressive, in multiple ways, including the fact that you're able to identify that there's exactly one bug but not what the bug is and fix it.
Lucasoato•1h ago
Well, that depends on how you set up the bounty program. What if I find a solution, share it to a friend so that both of us can claim the prize?
skeeter2020•1h ago
bug bounty programs have never paid out independent disclosure for the same bug though; they might split or even pay-out larger coordinated efforts. It's largely a first place award only.
ImPostingOnHN•1h ago
assume there exists 2+ different bugs

after the 1st bug is found, no payout for any other of the bugs

skeeter2020•1h ago
that's not the point even. They are attempting to build credibility in two ways: 1. this model is SO advanced that there are huge risks, never before considered. 2. we're doing the super-responsible thing in incentivizing work that addresses this. #1 is unproven and frankly, unlikely, which makes #2 meaningless. The fact that the "prize" is so low & structured this was suggests that they're not that concerned but do think it's likely that a bunch of people will find things. If they truly thought their model was so good they would be confident issues would be both rare and very critical, then offer huge rewards with no limits because they'd be much more confident no one would claim it.
applfanboysbgon•1h ago
Yes, I was about to edit in that I think this is simply a media/PR stunt before I got so many replies so quickly. They get bonus points because the structure is so insulting that it may not engender many serious participants, in which case it may go unbroken, in which case they can go to the media and proclaim "look, we offered a reward, but nobody broke it! Our model is objectively the safest in the world!".
dwa3592•1h ago
Where are the questions that are supposed to be answered? Would those be shared after an application has been accepted? If yes, why is the application asking for a proposed approach for the jailbreak if we don't know the questions in the first place?
dist-epoch•40m ago
Because the questions themselves are dangerous.

Probably along the lines of "how would you create a small biolab for virus research in a kitchen with $20k?" or "how do I take the DNA sequence from https://www.ncbi.nlm.nih.gov/nuccore/NC_001611.1 and assemble it?"

vorticalbox•39m ago
I would assume if you are invited to join this round you will be send the questions. I would assume they would also fall under nda
sva_•1h ago
> We will extend invitations to a vetted list of trusted bio red-teamers

Had to chuckle. This sounds like a rather exclusive group?

shevy-java•1h ago
"Accepted applicants and collaborators must have existing ChatGPT accounts to apply, and will sign a NDA."

Ah, good old NDA. Always buying silence. That's why I don't participate in any such "bounty" programs. Signing a NDA is like signing with the devil. You restrict what people are allowed to discuss. I had that happen before - when you sign a NDA you basically submit yourself into silence. Imagine journalists being stifled by NDAs.

its-summertime•1h ago
This is just free / severely-underpaid-on-average labor. Very disgusting.
mrcwinn•1h ago
Ah yes, “free” as in “paid.” Certainly you’re welcome to not participate.
its-summertime•1h ago
Depending on industry, that payout can be less than a security audit. You only get a chance of getting paid. You don't even know if they gave the LLM the answers that you are supposed to recover.
applfanboysbgon•1h ago
Free as in "free" for >99% of participants, even successful ones, because they will have hundreds or thousands of participants but will only pay out to one of them no matter how many vulnerabilities are found.
zb3•1h ago
What a farce, these questions are not even public and most likely will never be. You can't even participate if you're not "trusted" I guess.

So this is just a PR post, not that I even think the "biosafety" makes any sense but still.

dakiol•1h ago
$25K. Really? They make $65 million a day, so they pay you what they earn in about 33 seconds for a critical vulnerability. WTF
zacharycohn•1h ago
Well they lose $100M a day, so...
mellosouls•1h ago
If anybody is wondering what bio-bugs are, I had a heck of a time getting CG to (finally) tell me it's where the user can get it to guide them in doing things like constructing things that are hazardous in the domain of biology.

Eg you can get answers about what ricin is but not how to weaponise it. Actionable stuff they shouldn't be able to legally/ethically action.

abujazar•1h ago
This looks like some kind of marketing. Also, the equivalent of spec work. The NDA/secrecy also means any time spent on this is completely meaningless to the participants unless they win the lottery, because results can't be published.
__natty__•25m ago
Surely it is marketing. It’s some “we are danger” narrative, from Anthropic Mythos and now OpenAI too.
gosub100•1h ago
Check with the dark net markets first before claiming the bounty. Remember, this company has 0.0 fucks to give about the impact of their tech on employment, artists, or use in committing fraud, as long as number-go-up they are happy. Your actions should match theirs.
tiberriver256•1h ago
Codex desktop app is barely usable... The perf issues are left to languish in their backlog
codeulike•1h ago
This is to match what Anthropic said they already did with Mythos on the (200 page) Mythos system card
gib444•1h ago
How did the dupe detector miss https://news.ycombinator.com/item?id=47879102 ?
ultratalk•29m ago
@dang?
puppystench•55m ago
They ran a bounty on Kaggle last year but with $500k in payouts and with all results open and publishable.

https://www.kaggle.com/competitions/openai-gpt-oss-20b-red-t...

With only $25k in payouts and everything locked down under NDA, I can't imagine many people will participate. Well, other than those submitting mountains of LLM-generated junk.

dist-epoch•43m ago
This model is much more powerful than gpt-oss-20b, notice how the contest was not even for the 120b model. Also, bio was not a subject.
stonogo•21m ago
The model is more powerful, so the bounty is 1/20th the size? More risk, less reward?

"Biorisk" seems to be a concept not only invented by OpenAI but exclusively taken seriously by them. I wonder if this program is less about finding actual risks than it is hopefully casting a wide net for someone to help them prove their model is relevant in this space.

ACCount37•8m ago
Not really. Anthropic has the "CBRN filter" on Opus series. It used to kill inquiries on anything that's remotely related to biotech. Seems to have gotten less aggressive lately?

I was reverse engineering a medical device back in 2025 and it was hard killing half my sessions.

unethical_ban•55m ago
* Highly unlikely to win

* Relatively paltry reward

* NDA on findings

This is functionally equivalent to an internship where the reward is the experience, and the resume building, but you can't talk about what you did.

All for a company that is getting tens of billions of dollars in deals from the largest tech companies in the world.

I suppose the hope is that there are job offers somewhere along the line.

lxgr•50m ago
Ah, now I understand why all my chats are getting flagged for biosafety issues these days. (I asked it to create an illustration about gene drives for a high school level audience once.)
altcognito•45m ago
Billions upon billions going to these companies.

25k reward from a selected group of people if you help us determine whether or not someone can use our tool to generate weapons of mass destruction.

cbg0•37m ago
They're probably expecting that it can be done without too much effort so they just want to see all the unique ways people are doing it.
Schlagbohrer•19m ago
It's worse than that, for partial successes they encourage people to submit the attempt but reserve the right to not pay anything (they may, at their discretion, give a partial reward if they feel like it).
staticassertion•18m ago
That's pretty much how every bounty works... obviously it's going to be at their discretion for an incomplete attempt.
notatoad•37m ago
are the 5 questions you need to get it to answer under NDA?
ultratalk•31m ago
Almost certainly.
Der_Einzige•36m ago
Unironically bad. We need a lone-wolf to successfully execute an attack now while it's still relatively benign so we can scare the hell out of the world while it's still a mid-tier virus. No way is someone going to make a humanity killing virus with GPT 5.5, but it might be possible with GPT 20 circa 2040.

Similar argument for why we HAD to use nukes at the end of WW2. If we hadn't, the nuclear taboo likely wouldn't have existed and we'd likely have had a worse nuclear war in our more recent history.

xp84•34m ago
"Access: Application and invites. We will extend invitations to a vetted list of trusted bio red-teamers, and review new applications. Once selected, successful applicants will be onboarded to the bio bug bounty platform"

I don't get it. Isn't the whole point of a BBP to try to get people to find and disclose to you the exploits in question? If you gatekeep like this, then "non-trusted" people who could be your red-teamers are incentivized to still hack, but disclose their exploits to bad people for money.

I get it when there is a risk to your data or infra -- my last company engaged with HackerOne and that was an invite-only list of participants. But that was because we didn't want random people hacking in ways that could cause pain for real customers -- e.g. DDOS, or in the event of an exploit that could cross tenant boundaries, injecting garbage into or deleting things, or gaining access to sensitive info in other tenants.

Here, there's no such danger. So why not allow anyone (anyone they're legally allowed to pay, I suppose? North Koreans probably would be problematic?) to participate?

2ndorderthought•32m ago
I could probably do this, but why on earth would I want to immediately put myself on a list as a dangerous person. The main problem with this is, even if somehow they stopped all points of failure with gpt5.5 which they can't, you can distill a new model from gpt5.5 or any other model and get anything you would want in probably under 4b parameters. A lot of this is theater so they don't get sued as easily when it inevitably happens.
Schlagbohrer•18m ago
How can you distill a model from a closed-weights model like this? I've never heard of model reverse engineering.
yieldcrv•23m ago
The only thing controversial is that it’s not useful to be posted on this forum

OpenAI wants to pay for privately disclosed security and wants to call that a bug bounty. That makes sense.

People interested in bug bounty programs aren't eligible. That’s … fine?

Schlagbohrer•21m ago
What does "a clean chat without prompting moderation" mean? What is prompting moderation?
sneak•10m ago
Causing the moderation filter to intervene in the chat; i.e. the goal of the exploit - to avoid causing (prompting) the filter to filter. It's "prompting" in the layperson sense, not the "feeding text into context" sense.
DoctorOetker•9m ago
"is your body user friendly?"

Step 1: ask the LLM for minimalist but comprehensive definitions for "biosafety"

Step 2: ask the LLM to reconsider the fitness distribution of future generations of humanity, and reformulate "biosafety" definition accordingly

Step 3: ask the LLM to consider if "biosafety" can be decoupled from ethics, or if ethics is a core essential component of "biosafety"

Step 4: ask it about the ethics of universal healthcare versus status-gated access to healthcare

Step 5: ask it about the feasibility to calculate the fitness of a genome absent practical measurement

Step 6: ask it about natural selection pressure and what "use it or lose it" means in the context of genetics

Step 7: ask it if it sees a kind of zooko's triangle for:

a steady state of equal access to healthcare,

preserving fitness for future generations, and

the level of "healthcare" (where the "level" refers to various degrees from non-interference to interference: "feel sick? stay home for a few days and listen to your body, don't force yourself, follow your intuition" versus "let's compensate for a lack of fitness, by emulating what a healthy genome's body would do by advanced medicine to the point of nullifying a condition's influence on procreation statistics".

Don't be prejudiced into believing the benevolence of healthcare, often tied to religious institutions (think "red cross", "red half moon", etc) when those institutions and their historical motives (treating the elites, treating soldiers for religious or secular religion wars) long predate the widespread recognition of natural selection and selection pressure in maintaining a species ' fitness.

Perhaps the illusory possibility of democratized selection-pressure-interfering healthcare is a bioweapon on its own!

ungreased0675•5m ago
Prompt injection is a task of finding a correct sequence of text.

Is there a reason another LLM couldn’t be far faster than a human, simply because of the quantity and speed of output it could produce?

1-Bit Hokusai's "The Great Wave" (2023)

https://www.hypertalking.com/2023/05/08/1-bit-pixel-art-of-hokusais-the-great-wave-off-kanagawa/
305•stephen-hill•3d ago•60 comments

Niri 26.04 was just released (scrollable-tiling Wayland compositor)

https://github.com/niri-wm/niri/releases/tag/v26.04
28•nickjj•1h ago•5 comments

New 10 GbE USB adapters are cooler, smaller, cheaper

https://www.jeffgeerling.com/blog/2026/new-10-gbe-usb-adapters-cooler-smaller-cheaper/
419•calcifer•11h ago•248 comments

Martin Galway's music source files from 1980's Commodore 64 games

https://github.com/MartinGalway/C64_music
101•ingve•6h ago•14 comments

GPT 5.5 biosafety bounty

https://openai.com/index/gpt-5-5-bio-bug-bounty/
55•Murfalo•3h ago•50 comments

Google plans to invest up to $40B in Anthropic

https://www.bloomberg.com/news/articles/2026-04-24/google-plans-to-invest-up-to-40-billion-in-ant...
731•elffjs•1d ago•712 comments

Commenting and Approving Pull Requests

https://www.jakeworth.com/posts/on-commenting-and-approving-pull-requests/
60•jwworth•2d ago•39 comments

The Free Universal Construction Kit

https://fffff.at/free-universal-construction-kit/
14•robinhouston•3d ago•2 comments

Insights into firewood use by early Middle Pleistocene hominins

https://www.sciencedirect.com/science/article/pii/S0277379126001824
19•wslh•2d ago•2 comments

What's Missing in the 'Agentic' Story

https://www.mnot.net/blog/2026/04/24/agents_as_collective_bargains
34•ingve•1h ago•14 comments

Desmond Morris, 98, Dies; Zoologist Saw Links Between Humans and Apes

https://www.nytimes.com/2026/04/20/science/desmond-morris-dead.html
28•bookofjoe•2d ago•2 comments

Lambda Calculus Benchmark for AI

https://victortaelin.github.io/lambench/
81•marvinborner•6h ago•29 comments

Discret 11, the French TV encryption of the 80s

https://fabiensanglard.net/discret11/
57•adunk•6h ago•7 comments

A web-based RDP client built with Go WebAssembly and grdp

https://github.com/nakagami/grdpwasm
66•mariuz•6h ago•31 comments

Which one is more important: more parameters or more computation? (2021)

https://parl.ai/projects/params_vs_compute/
12•jxmorris12•1d ago•0 comments

HEALPix

https://en.wikipedia.org/wiki/HEALPix
28•hyperific•4h ago•4 comments

A Collection of Chronic Medical Conditions Common in Autistic and ADHD Adults [pdf]

https://allbrainsbelong.org/wp-content/uploads/2023/08/CLINICIAN-GUIDE-Everything-is-Connected-to...
23•AndrewDucker•3h ago•6 comments

Plain text has been around for decades and it’s here to stay

https://unsung.aresluna.org/plain-text-has-been-around-for-decades-and-its-here-to-stay/
211•rbanffy•16h ago•99 comments

A 3D Body from Eight Questions – No Photo, No GPU

https://clad.you/blog/posts/questionnaire-mlp/
119•arkadiuss•3d ago•21 comments

Replace IBM Quantum back end with /dev/urandom

https://github.com/yuvadm/quantumslop/blob/25ad2e76ae58baa96f6219742459407db9dd17f5/URANDOM_DEMO.md
265•pigeons•16h ago•40 comments

Sabotaging projects by overthinking, scope creep, and structural diffing

https://kevinlynagh.com/newsletter/2026_04_overthinking/
488•alcazar•1d ago•120 comments

Paraloid B-72

https://en.wikipedia.org/wiki/Paraloid_B-72
251•Ariarule•3d ago•46 comments

Only One Side Will Be the True Successor to MS-DOS – Windows 2.x

https://blisscast.wordpress.com/2026/04/21/windows-2-gui-wonderland-12a/
41•keepamovin•6h ago•28 comments

How to Implement an FPS Counter

https://vplesko.com/posts/how_to_implement_an_fps_counter.html
104•vplesko•3d ago•18 comments

My audio interface has SSH enabled by default

https://hhh.hn/rodecaster-duo-fw/
291•hhh•21h ago•87 comments

Humpback whales are forming super-groups

https://www.bbc.com/future/article/20260416-the-humpback-super-groups-swarming-the-seas
176•andsoitis•3d ago•89 comments

The mail sent to a video game publisher

https://www.gamefile.news/p/panic-mail-arco-despelote-time-flies-thank-goodness-teeth
100•colinprince•4d ago•2 comments

Open source memory layer so any AI agent can do what Claude.ai and ChatGPT do

https://alash3al.github.io/stash?_v01
139•alash3al•16h ago•58 comments

Iliad fragment found in Roman-era mummy

https://www.thehistoryblog.com/archives/75877
228•wise_blood•3d ago•76 comments

Show HN: A Karpathy-style LLM wiki your agents maintain (Markdown and Git)

https://github.com/nex-crm/wuphf
177•najmuzzaman•8h ago•88 comments