On: A heap overflow and SSO misconfiguration to compromise OpenAI internal repos

[monster_truck]

> monitoring the egress traffic

Oh so you mean the thing HuggingFace wasn't doing at all while also allowing any user's arbitrary programs to call out to the open web from prod?

[larodi → monster_truck]

indeed, how does this add up the fact that 20k agents drilling another corpo's headquarters may actually register on a radar. and it seems they did on multiple occasions...?