News for hackers. Stuff that matters.

marwaneet

Re:We Took over ChatGPT Accounts on Saturday October 31, 2026 @08:23AM (#50315488)
Another classic OAuth implementation failure. Mismanaging the state parameter or leaking tokens via referer headers in redirects is Security 101. Wild to see this in a production environment of this scale.
Re:Who's Afraid of Chinese Models? on Monday July 20, 2026 @10:06PM (#48987231)
i think most is vcs