WeWorkBuddy

How We Took Over ChatGPT Accounts

How We Took Over ChatGPT Accounts Parameter Labs describe an exploit they found against ChatGPT's implementation of the artifacts pattern (OpenAI used to call this "Canvas" but it looks like the latest revision is called HTML previews ), where interactive custom HTML apps are displayed in a sandboxed iframe. It's important that HTML in these stays tightly sandboxed to avoid untrusted code interacting with OpenAI APIs and accessing private data. Parameter found quite a complex attack chain. OpenA

阅读原始来源
来源参考:How We Took Over ChatGPT Accounts。暂未取得截图。
来源记录 · 预览待采集 · simonwillison.net打开来源查看完整网页。

来源记录

研究分析

来源记录

来源描述:How We Took Over ChatGPT Accounts Parameter Labs describe an exploit they found against ChatGPT's implementation of the artifacts pattern (OpenAI used to call this "Canvas" but it looks like the latest revision is called HTML previews ), where interactive custom HTML apps are displayed in a sandboxed iframe. It's important that HTML in these stays tightly sandboxed to avoid untrusted code interacting with OpenAI APIs and accessing private data. Parameter found quite a complex attack chain. OpenA

现有背景

可供比较的近期同类记录:“[程序员] 搞了个挂机修仙小游戏” (V2EX, 2026年11月5日);“Why This Obscure Audio Codec Is a Perfect Fit for the N64” (Hacker News, 2026年11月5日)。主题相近仅用于导航,未核验其是否属于同一需求或独立证据。

研究状态

这条记录尚不能可靠归入主类,未生成商业或性能结论。

缺失证据

需要核验主要事件、受影响对象与原始证据。

下一步

阅读原文,明确它支持什么决策,再选择对应分析框架。