Do the math: How we took over ChatGPT accounts
165 comments
- Points298
- Comments147
165 comments
Story details from Hacker News ↗ · linked article on parameter.ai.
Do the math: How we took over ChatGPT accounts was first seen on Hacker News · Front page on Oct 31, 2026. Since then it has appeared in 94 checks on 2 different days. Its best position was #2 of 30, reached on Oct 31, 20:37 UTC. It is #5 right now, holding steady at #5 over the last 6 checks.
Position on Hacker News · Front page at every check (lower is better).
Best rank per day (UTC).
points as reported by Hacker News.
A few top-level comments from Hacker News, shortened. Read the full thread on Hacker News.
> OpenAI confirmed both frontends rejected the reported messages, resolved the issue, and awarded a total bounty of $5,000. It requires the user to click a link. But I still find this bounty very low. Others may not report them if such a small bounty is given.
Oof. Together with the fact that it's possible to remotely access the file system (!) of computers ever having started a "Work" chat in the ChatGPT desktop app [1], this seems pretty bad. [1] https://news.ycombinator.com/item?id=50078284
Something about the writing style here makes it hard for me to follow what actually happened. The section about JSONP for example seems to be explaining how JSONP works and how it's designed as an attempt to work around these attacks, but that explanation is then passed off as an explanation of how they bypassed the…
Yes. As of Nov 1, 11:07 UTC it is #5, holding steady at #5 over the last 6 checks.
#2 on Hacker News · Front page, on Oct 31, 20:37 UTC. Trendoday checks this list every 15 minutes.
It was first seen on Oct 31, 2026 and has been on the list on 2 days (94 checks) since.
298 points and 147 comments; submitted by armcat on Oct 31, 2026.