News for hackers. Stuff that matters.

A comment on What is real importance of the OAuth *state* parameter is?.

Re:What is real importance of the OAuth *state* parameter is? by MorL on Wednesday March 13, 2024 @06:16PM (#39698249)
Could you elaborate? What do you mean by "could install malicious ChatGPT plugins" ?
[ Parent | on HN ]
Re:What is real importance of the OAuth *state* parameter is? by DBformore on Wednesday March 13, 2024 @06:18PM (#39698267)
ChatGPT plugins (think mini-apps for ChatGPT) expand functionality to ChatGPT but introduce new attack vectors. Those security researchers could install a malicious ChatGPT, that they wrote, on another victim account.
[ Parent | on HN ]