touch your security key, enter security pin, touch your security key again, we have sent an code to your email, verify idendity, touch your security key again, enter security pin, touch your security key again, use passkey to login
Very not concerned about PII leaks given I have to verify my identity like 2 times a week to retain CyBeR AcCesS on sota providers. Must be losing them or smth
OAI training new model i suppose or something cause performance is super degrading. Tempted to swap to claude in the meantime but then i got triggered to the moon after seeing "load-bearing" and "honest" appear after the first prompt so i.g I gotta write some code by hand now
“Why would I look at code? It’s like assembly, like a compiled artifact.”
Sensei @karpathy fully agentic, 18m after “I don’t really use autocomplete AI code tools”
On July 25, our team hacked OpenAI.
It took us less than 72 hours.
Two vulnerabilities chained together gave us access to ChatGPT and Codex accounts belonging to OpenAI employees. We demonstrated the impact with a harmless PR in OpenAI’s internal monorepo.
The full chain:
HEIF upload → libheif heap overflow → RCE → OpenAI SSO flaw → ChatGPT/Codex takeover → connected GitHub → internal PR.
OpenAI fixed the SSO issue roughly 14 hours after our report.
Research by @rootxharsh, @S1r1u5_ and @iamnoooob.
Full technical write-up:
hacktron.ai/blog/hacking-ope…
On July 25, our team hacked OpenAI.
It took us less than 72 hours.
Two vulnerabilities chained together gave us access to ChatGPT and Codex accounts belonging to OpenAI employees. We demonstrated the impact with a harmless PR in OpenAI’s internal monorepo.
The full chain:
HEIF upload → libheif heap overflow → RCE → OpenAI SSO flaw → ChatGPT/Codex takeover → connected GitHub → internal PR.
OpenAI fixed the SSO issue roughly 14 hours after our report.
Research by @rootxharsh, @S1r1u5_ and @iamnoooob.
Full technical write-up:
hacktron.ai/blog/hacking-ope…
lost so much weight none of my pants fit anymore and my belts are at the last hole barely fitting. Need some recs for style in sg otherwise just gg uniklo again ig
A hardware wallet that makes signing cost you.
Pulse for everyday. Blood when you mean it 🩸.
OS. Bitcoin & Ethereum. 3D printable w/ raspberry pi ($90 in materials).
</CELL/>
Got targeted by a "semi" sophisticated phishing/scam attempt just now.
Step 1) Receive an official email from google that my email was used as a recovery email for danhansen1952@gmail.com (first image).
Step 2) (optional im not sure) Click on remove email. Appeard to be already removed.
Step 3) Receive call from SG registered number 3106 2518 (all previous attempts have been from foreign numbers).
Step 4) Matthew from "google" is very professional in following a well thought out script that might come straight out of a real support playbook.
Step 5) Matthew sends whatever that email is. (second image) The link in question points to the official hotelprices support page on support(.)google(.)com
Headers:
from:noreply@google.com
reply-to:noreply@google.com
to:support@tickets-handling.com
< At this point I kind of got excited and tried to record, but my nontechnical ass didn't know that the iphone call recording will tell the other side and Matthew hung up >
My guess is that given the link doesn't work, the fake support agent would tell me to type in a custom url or something.
oh boy "frontier" models losing perf again, I wonder what that means... I hope this strategy blows up in their face when everyone switches to some OS non flaky chinese model
"I can...roll up to the train station 10 minutes before departure"
you can do it... with *german* high speed rail.
with chinese HSR you can't, because their stations are located far from the city center and have airport-style boarding.
Introducing Claude Code Security, now in limited research preview.
It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss.
Learn more: anthropic.com/news/claude-co…