Tooling4d ago
Parameter discloses a ChatGPT share-link flaw that let one opened link read private chats; OpenAI fixed it Oct 26 and rated it P1
Security firm Parameter published an exploit chain in which an attacker publishes a malicious conversation through ChatGPT's normal sharing feature; when a signed-in victim opens the /share/ link, the payload runs as chatgpt.com in their session, lists conversations, reads a private chat that was never shared, and sends data out. Parameter reported it through OpenAI's bug bounty on October 18; OpenAI raised it from P2 to P1, fixed it on October 26 and paid a $5,000 bounty. Parameter reports no real-world use, and users do not need to do anything.
Pricing3d ago
OpenAI will pool ChatGPT and Codex into one token-based usage allowance starting in December for Plus, Pro, and Business; Instant chat is excluded
On Oct 31, OpenAI's Help Center added a page titled "Understanding ChatGPT and Codex usage limits": starting in December, the usage allowance on Plus, Pro, and Business plans will be shared across ChatGPT and Codex as OpenAI brings the agentic capabilities of Work into the main ChatGPT experience. Usage will be measured in tokens, so stronger models and more complex tasks use more; Instant chat will not draw from the allowance. Users will see combined remaining usage and reset times in Settings > Usage, and can wait for a reset, upgrade, or buy credits when they run out. OpenAI says it expects most users will not need to wait for resets more often than they do now, but it has not given an exact start date or per-plan allowances. The news drew strong concern from Plus users on X.
Tooling6d ago
X discussion: screenshots of ChatGPT merging Chat and Work go viral, and OpenAI's Tibo says it is not rolling out yet
This is an X discussion, not an official launch. On Oct 28, X user Angel (@Angaisb_) posted a screenshot saying ChatGPT is unifying Chat and Work and asked how that would change usage limits; the post drew about 440,000 views. About an hour and a half later, Tibo (@thsottiaux), whose X bio reads Codex & ChatGPT @OpenAI, quoted it: the team is working on this but it is not rolling out yet, the plan is to bring the best of Chat and Work together at some point this year, and they will proceed carefully and take their time. His reply drew about 2,800 likes and more than 900 replies.
Discussion & Comments
0Sign in to join the discussion
Connect with AI developers to exchange benchmark insights.