logoalt Hacker News

fwlr • today at 3:14 PM • 1 reply • view on HN

As one of those comments I dispute your characterization of it as the reported vulnerability being fake, very few people were saying that. The main thing being called fake was the narrative that with AI it was trivial to exploit the vulnerability.

It has not escaped me that the successful exploit did in fact just say “codex, exploit this” and got it.

I had assumed the rash of commenters saying “lol I am not revealing my AI’s exploit for a measly 500 bucks” were saying that because their AI attempt failed. Now I know they didn’t even try!


Replies

ratscylla • today at 6:19 PM

If you follow the threads, it looks like the original post wasn’t exploitable. It looks like it was hacked within an hour of being made exploitable (actually running php).

Would be cool to get an accurate timeline / postmortem from the author of the site.

➕ show 1 reply