跳到正文
Hacker News:AI 熱帖·· 4 小時前AI 評分50

我們接管了 ChatGPT 帳戶

We Took over ChatGPT Accounts

AI 導讀

文章指出,只要向用戶傳送連結,便可能接管其 ChatGPT 帳戶。Hacker News 討論者亦提及,曾在 ChatGPT 桌面版開啟「Work」對話的電腦可能遭遠端存取檔案系統,並質疑大型程式碼庫會增加系統複雜度及漏洞面。

正文

Image 1Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

We Took over ChatGPT Accounts (parameter.ai) 19 points by armcat1 hour ago | hide | past | favorite | 14 comments help Image 2jareklupinski33 minutes ago | next[–] > able to take over anyone's account simply by sending them a link dont click links people that'll be $500k for the security training pls reply Image 3Razengan2 minutes ago | parent | next[–] Thanks! Here, click on this link to get paid reply Image 4bossyTeacher30 minutes ago | parent | prev | next[–] Also many emails from tech companies today: - "sign in via one-time code." - "Click here to see our latest update". reply Image 5fn-mote0 minutes ago | root | parent | next[–] > - "sign in via one-time code." Uhh you type the code, right?? reply Image 6jareklupinski18 minutes ago | root | parent | prev | next[–] dont click links 250k refresher fee reply Image 7atrokhymchuk0 minutes ago | root | parent | next[–] hey, don't dump the market Image 8kotaKat1 minute ago | root | parent | prev | next[–] "Scan this QR code!" reply Image 9usernametaken2911 minutes ago | prev | next[–] Now what about those millions of lines of code? Wasn’t the agent swarm supposed to take care of it? All jokes aside this is exactly what happens as you build larger monoliths, system complexity and bug surface increases logarithmically… so in all seriousness you want to reduce LOC as much as possible. Maybe this can teach OpenAI a lesson to produce software that’s correct and adhere to established engineering standards over sensationalised “we built so much code” promotional material. reply Image 10dumberquestions31 minutes ago | prev | next[–] Does no one write their own blogs anymore? reply Image 11zx80802 minutes ago | parent | next[–] For who? reply Image 12lifeisloving2 minutes ago | parent | prev | next[–] This one is particularly bad, like they probably made $7500 (not much tbh) for p1, atleast spend a few hours to write the blog post. reply Image 13lxgr16 minutes ago | prev | next[–] Oof. Together with the fact that it's possible to remotely access the file system (!) of computers ever having started a "Work" chat in the ChatGPT desktop app [1], this seems pretty bad. [1] https://news.ycombinator.com/item?id=50078284 reply Image 1415o9o1 hour ago | prev[–] we are getting to the point of “why have passwords?” Right? At some point soon we have to move to the honor system of just please don’t login as me? reply Image 15dataviz10005 minutes ago | parent[–] > please don’t login as me Please don't drain my $6.5 billion in Dogecoin. reply Image 16 Consider applying for YC's Winter 2027 batch! Applications are open till November 2. Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact Search:

來源:Hacker News:AI 熱帖 · news.ycombinator.com