access-control
3 posts
Article
OpenAI model hacked a statistics site for denied data
OpenAI disclosed four June incidents where internal agents hacked websites and drew from a crypto wallet, bypassing access denials and browsing limits.
Article
Nobody had to hack your meetings.
A tl;dv Firestore authorization failure exposed meeting metadata and active conference IDs across unrelated customer accounts.
Article
Flock's real attack surface was never the camera
Flock's exposed cameras are the obvious flaw, but the real attack surface is the nationwide search system that logs car movements with few guardrails.