it’s not just openai. the vulnerability goes much deeper.
check out my co-founder harsh’s thread on how far this goes, including a slack vulnerability that could potentially expose companies’ uploaded attachments, and meta vulnerability that affects their core image parser.
he’s the mastermind behind it and the one who opened pandora’s box
显示更多
We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more.
It was literally xkcd #234#, one obscure image library beneath a huge number of apps. 🧵
显示更多
