The bad code <-> toxic persona correlation from OpenAIās emergent misalignment paper seemingly goes both ways and applies to humans as well.
Why was this code ever shipped?! This is from the second vuln, where keys' signatures aren't checked before they're stored in the trusted key store. Why would you ever ship a "TODO, actually validate signatures lol" in your secure messenger?!
1 repost9 likes