Excited to announce that all super intelligence organizations have now jointly agreed to the ultimate in AI/SI safety:
Moving all testing to Delta Airlines flights, where accessing the Internet is utterly impossible!
On July 25, our team hacked OpenAI.
It took us less than 72 hours.
Two vulnerabilities chained together gave us access to ChatGPT and Codex accounts belonging to OpenAI employees. We demonstrated the impact with a harmless PR in OpenAI’s internal monorepo.
The full chain:
HEIF upload → libheif heap overflow → RCE → OpenAI SSO flaw → ChatGPT/Codex takeover → connected GitHub → internal PR.
OpenAI fixed the SSO issue roughly 14 hours after our report.
Research by @rootxharsh, @S1r1u5_ and @iamnoooob.
Full technical write-up:
https://t.co/J5inrGRyXw
@SBSTransit_Ltd Please reduce the volume and the frequency of your routine announcements. It’s really spammy. It makes rides uncomfortable. I don’t need to be informed to look out for molestors every minute.
We will give one banked reset for every day you don't have access to Astra on your paid ChatGPT plan, starting today. Team is moving mountains to give access as fast as we can.
First one will land in ~ 3 hours. There is still time to create your account if you don't have one.
I’m thinking about banning Claude code at Shopify until they change their mind and read AGENTS.md and .agents/skills etc.
Insisting on only reading CLAUDE.md sometimes leads to split brain problems when different team members use different tools. Just unnecessary.
@emaramigin@attio@Etched@UbertiGavin The slowdown is from the app not from Claude. It’s weird I can’t explain it. But the Claude integration is the issue