Greg Brockman @gdb

we've found and have been working on disclosure for a remote code execution in a widely-deployed compression library. it's both an impactful issue and an example that shows how complicated it can be to coordinate patching, since it's integrated into a lot of downstream software: [引用 @OpenAI]: During this red-teaming exercise, we also found a vulnerability that allows for unauthenticated remote code execution in Brotli, a widely-deployed compression library included in many pieces of software such as Node.js, Bun, and Envoy. The flaw could let an attacker run their own code on affected systems by sending or replying with malicious compressed data, without any need to create a user acc…

• OpenAI's Brockman Withdraws Second $25M Donation to AI Super PAC2026-09-30
• OpenAI Has Gone Nine Months Without a Communications Chief2026-09-28
• OpenAI's Brockman Optimistic About AI2026-09-17
• OpenAI President on Lessons After Hugging Face Incident2026-09-14