We took over ChatGPT accounts: the MathLive postMessage chain, and the 20-line audit for your own listeners
Yesterday's disclosure from Parameter is the most elegant web exploit of the month: a complete takeover of ChatGPT accounts where the victim's only action was opening a shared-conversation link . No paste, no login, no click in the final version: about 4.5 seconds from link to JavaScript running as…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-31 10:47 · DEV Community — AI
We took over ChatGPT accounts: the MathLive postMessage chain, and the 20-line audit for your own listeners