First screen, captured 4 days ago.

Patch the Planet: global response coordination as agents uncover vulnerabilities

What HN thinks

A PHP RCE gets found, and the thread spends most of its energy arguing over who gets the credit and whether the press release counts as a protection racket.

It's mostly marketing
Many see Patch the Planet as PR. They point out that Calif's own writeup credits human expertise and target knowledge, not the model, for finding the PHP bug.
Arsonist selling fire insurance
Some argue AI labs made exploit discovery dramatically easier and are now selling themselves as the fix. They call that a conflict of interest that borders on a protection racket.
Finding bugs is still good
Others reply that the vulnerabilities already existed and AI only exposed them. Finding and reporting them raises the security floor, and the criticism of OpenAI here is unfair.

Consensus: There is no real consensus. Most commenters do agree the announcement is heavy on marketing and that human expertise drove the actual discovery.

Recommended in the comments

Codex for OSS ↗ (service): A commenter pointed to it as the program that lets open source maintainers fix bugs themselves.
PatchWave ↗ (service): Its co-founder posted it as a way to get security updates like this one landing automatically.

Summarised by Claude from the comment thread 3 days ago.

Points: 253
Comments: 183
Best rank: #6
Posted: 2026-10-21 by nr378
Category: Security

vulnerability-disclosure php openai patch-the-planet ai-security open-source-maintainers codex

All captures:

Full page

Captured 4 days ago. Click for the whole screenshot.

Looks similar

Screenshot of openai.com: Securing our frontier model training environment

Securing our frontier model training environment (openai.com)

98 points by pretext 2 days ago | 99 comments

OpenAI post describing how it hardened containment of its frontier model training environments, including offline training, defense in depth, and AI-agent red-teaming.

openai ai-safety sandboxing red-teaming

Screenshot of thephp.foundation: Today's PHP security release, and how we're strengthening security

Today's PHP security release, and how we're strengthening security (thephp.foundation)

761 points by ejohnso49 4 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

php cve remote-code-execution vulnerability-disclosure