Zero-Day-a-Day Proposal

What if I release one zero day a day until a big new model is released? Will this finally make OpenAI and Anthropic shut up about "cybersecurity risk"? Like these things are not that hard to find in most software. I heard something about it costing $20k in tokens I'd do it for less if it wasn't for some whiny bug bounty program. The reason there aren't zero days everywhere is cause nobody seriously looks. Because hacking other people's shit with them is illegal and criminals are usually not very skilled, or they would choose a different line of work. Want more zero days to be found? Make hacking legal. Until then, don't try to claim it's hard, it's just not incentivized.

A screenshot of a social media post by George Hotz proposing to release one zero-day vulnerability per day until a major new AI model is released. He sarcastically argues that vulnerabilities are easy to find and that there are not more zero-days because hacking is illegal and criminals lack the incentive or skill. The joke is a provocative cybersecurity take aimed at OpenAI and Anthropic’s warnings about security risks, used as a reaction to claims that finding vulnerabilities is difficult. EN: A screenshot of a social media post by George Hotz proposing to release one zero-day vulnerability per day until a major new AI model is released. He sarcastically argues that vulnerabilities are easy to find and that there are not more zero-days because hacking is illegal and criminals lack the incentive or skill. The joke is a provocative cybersecurity take aimed at OpenAI and Anthropic’s warnings about security risks, used as a reaction to claims that finding vulnerabilities is difficult.

• @gentoomemes / 20669 2026-04-11