Yesterday I discovered a security flaw in OpenAI’s web session management. I reported it through their bug reporting process, managed by a site called Bugcrowd. The response was quick, probably from an AI bot, and dismissive. It classified the issue as P5 (Informational), the lowest category of security findings. The issue I found is simple. […]