Hacktron founder @S1r1u5_ reveals how his team hacked into OpenAI starting with a single HEIC image and ended with Codex opening a PR under an employee’s token: "The main one was an SSO misconfiguration in OpenAI's identity system. The other bug is a remote code execution on community.openai." "By just uploading an HEIC image, an image format that you might have noticed in iPhone, we were able to get remote code execution there." "Every employee that logins to Discourse, we can use their…

S1r1u5_@S1r1u5_21h ago

On July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc. We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵 https://t.co/gVsmQZwSc8