WeWorkBuddy

How We Took Over ChatGPT Accounts

How We Took Over ChatGPT Accounts Parameter Labs describe an exploit they found against ChatGPT's implementation of the artifacts pattern (OpenAI used to call this "Canvas" but it looks like the latest revision is called HTML previews ), where interactive custom HTML apps are displayed in a sandboxed iframe. It's important that HTML in these stays tightly sandboxed to avoid untrusted code interacting with OpenAI APIs and accessing private data. Parameter found quite a complex attack chain. OpenA

Read original source
Source reference for How We Took Over ChatGPT Accounts. Screenshot not yet available.
Source record · preview pending · simonwillison.netOpen the source for the full page.

Source record

Research analysis

Source record

Source account: How We Took Over ChatGPT Accounts Parameter Labs describe an exploit they found against ChatGPT's implementation of the artifacts pattern (OpenAI used to call this "Canvas" but it looks like the latest revision is called HTML previews ), where interactive custom HTML apps are displayed in a sandboxed iframe. It's important that HTML in these stays tightly sandboxed to avoid untrusted code interacting with OpenAI APIs and accessing private data. Parameter found quite a complex attack chain. OpenA

Available context

Recent records to compare: “[程序员] 搞了个挂机修仙小游戏” (V2EX, Nov 5, 2026); “Why This Obscure Audio Codec Is a Perfect Fit for the N64” (Hacker News, Nov 5, 2026). Shared themes are navigation hints; they have not been verified as the same need or independent corroboration.

Research status

This record has not been assigned a sufficiently supported main content category. No commercial or performance conclusion is generated.

Missing evidence

The main event, affected audience and supporting primary source need review.

Next step

Read the original and identify the decision it supports before choosing an analysis framework.