我們接管了 ChatGPT 帳戶
We Took over ChatGPT Accounts
文章指出,只要向用戶傳送連結,便可能接管其 ChatGPT 帳戶。Hacker News 討論者亦提及,曾在 ChatGPT 桌面版開啟「Work」對話的電腦可能遭遠端存取檔案系統,並質疑大型程式碼庫會增加系統複雜度及漏洞面。
Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
We Took over ChatGPT Accounts (parameter.ai) 19 points by armcat1 hour ago | hide | past | favorite | 14 comments help
jareklupinski33 minutes ago | next[–] > able to take over anyone's account simply by sending them a link dont click links people that'll be $500k for the security training pls reply
Razengan2 minutes ago | parent | next[–] Thanks! Here, click on this link to get paid reply
bossyTeacher30 minutes ago | parent | prev | next[–] Also many emails from tech companies today: - "sign in via one-time code." - "Click here to see our latest update". reply
fn-mote0 minutes ago | root | parent | next[–] > - "sign in via one-time code." Uhh you type the code, right?? reply
jareklupinski18 minutes ago | root | parent | prev | next[–] dont click links 250k refresher fee reply
atrokhymchuk0 minutes ago | root | parent | next[–] hey, don't dump the market
kotaKat1 minute ago | root | parent | prev | next[–] "Scan this QR code!" reply
usernametaken2911 minutes ago | prev | next[–] Now what about those millions of lines of code? Wasn’t the agent swarm supposed to take care of it? All jokes aside this is exactly what happens as you build larger monoliths, system complexity and bug surface increases logarithmically… so in all seriousness you want to reduce LOC as much as possible. Maybe this can teach OpenAI a lesson to produce software that’s correct and adhere to established engineering standards over sensationalised “we built so much code” promotional material. reply
dumberquestions31 minutes ago | prev | next[–] Does no one write their own blogs anymore? reply
zx80802 minutes ago | parent | next[–] For who? reply
lifeisloving2 minutes ago | parent | prev | next[–] This one is particularly bad, like they probably made $7500 (not much tbh) for p1, atleast spend a few hours to write the blog post. reply
lxgr16 minutes ago | prev | next[–] Oof. Together with the fact that it's possible to remotely access the file system (!) of computers ever having started a "Work" chat in the ChatGPT desktop app [1], this seems pretty bad. [1] https://news.ycombinator.com/item?id=50078284 reply
15o9o1 hour ago | prev[–] we are getting to the point of “why have passwords?” Right? At some point soon we have to move to the honor system of just please don’t login as me? reply
dataviz10005 minutes ago | parent[–] > please don’t login as me Please don't drain my $6.5 billion in Dogecoin. reply
Consider applying for YC's Winter 2027 batch! Applications are open till November 2. Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact Search:
來源:Hacker News:AI 熱帖 · news.ycombinator.com