Harsh Jaiswal(@rootxharsh):We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more. It was literally xkcd #234, one obscure image library beneath a huge number of apps. 🧵

Harsh Jaiswal

@rootxharsh

Co-founder and research @hacktronai | auditing at @cure53berlin | prev @zomato @vimeo @pdiscoveryio @httpvoid0x2f

加入 April 2015

1.3K 正在關注 25.7K 粉絲

Harsh Jaiswal@rootxharsh

2026.09.18 04:19

We’re disclosing HEIF Heist, a months-long investigation into libheif that allowed us to hack OpenAI, Slack, Meta, GitHub Ent, Rails, Next.js, ImageMagick, and many more. It was literally xkcd #234#, one obscure image library beneath a huge number of apps. 🧵