it’s not just openai. the vulnerability goes much deeper.
check out my co-founder harsh’s thread on how far this goes, including a slack vulnerability that could potentially expose companies’ uploaded attachments, and meta vulnerability that affects their core image parser.
he’s the mastermind behind it and the one who opened pandora’s box
더 보기
We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more.
It was literally xkcd #234#, one obscure image library beneath a huge number of apps. 🧵
더 보기
