Malte Ubl(@cramforce):You probably heard about the OpenAI white-hat hack earlier today by @S1r1u5_ and friends. The same vulnerability impacted most image processing where images can be under attacker control (like an app with profile picture upload), and with that next.js' image optimization support. Here is the story of how we handled this event, helped track down "the literal guy in Nebraska" that @xkcd predicted and get the underlying issue fixed. Also, notable, when using image optimization through Vercel's platform you are protected from exploitation through sandboxing of the code that handles potentially hostile payloads.

Malte Ubl

@cramforce

Self-driving infrastructure @Vercel CTO. Immigrant 🇺🇸/🇩🇪/acc

参加 July 2008

932 フォロー中 51.1K ファン

Malte Ubl@cramforce

2026.09.18 23:36

You probably heard about the OpenAI white-hat hack earlier today by @S1r1u5_ and friends. The same vulnerability impacted most image processing where images can be under attacker control (like an app with profile picture upload), and with that next.js' image optimization support. Here is the story of how we handled this event, helped track down "the literal guy in Nebraska" that @xkcd predicted and get the underlying issue fixed. Also, notable, when using image optimization through Vercel's platform you are protected from exploitation through sandboxing of the code that handles potentially hostile payloads.