self.md radar — 2026-11-01
a shared ChatGPT link reached private chats
Parameter Labs has published an account-takeover chain delivered through an ordinary ChatGPT share. the researchers report that OpenAI finished fixing it on October 26; the disclosure follows the failure through a graph, an HTML preview and a math keyboard
1. ChatGPT’s math keyboard let a preview reach private data
the HTML preview could not read the parent ChatGPT page directly. a graph on that page had loaded MathLive, whose keyboard listener accepted messages from the preview without checking that it was the approved sender
Parameter used those messages to supply keyboard-layout HTML, insert an unsandboxed frame and get JavaScript running as chatgpt.com. a YouTube script endpoint allowed by the page’s content security policy completed the chain
the code listed the signed-in viewer’s conversations, fetched an unrelated private chat and sent a selected value to a researcher-controlled server. the final version needed only the shared link to open; Parameter reports three automatic reproductions in a separate account
OpenAI reproduced the issue, marked it P1 and paid $5,000, according to the disclosure. both frontend variants rejected the reported messages by October 26.
the review target is every privileged listener reachable from untrusted content, including the one installed by a different feature
reading: Parameter’s proof and remediation timeline
2. DeltaDB records the work between Git commits
an agent’s transcript and its changing files live in the same history in DeltaDB. Antonio Scandurra’s October 29 engineering account describes local SQLite storage, a causal graph of edits and separate timelines that a subagent can fork and later merge without a Git commit
a version is represented by the graph’s current tips, called a frontier. the frontier grows with open branches, rather than retaining a counter for every short-lived agent that ever wrote to it. the trade-off is walking the graph to answer ancestry questions
local edits apply before synchronization. each shared thread then gets its own Cloudflare Durable Object, with a WebSocket per interested client. current deployments are Delta’s multi-tenant service or a customer’s own Cloudflare; portability elsewhere is a design claim, not a listed deployment
the CLI and plugins are available. the proposed per-character link back to the conversation that produced code is still described as work about to ship
reading: Delta’s SQLite, timeline and synchronization design
3. airplane mode still needed one SMS
Vitalik Buterin kept his phone on airplane mode for 100 days, with Wi-Fi still available. he briefly reconnected to receive the code needed to maintain the phone plan itself. in Singapore, an inability to receive another SMS kept him out of Grab
his October 31 account also reports trying entries in an offline-knowledge-app bounty. several made an on-device language model think before answering; waits ran from 1 to 22 minutes. he preferred apps that immediately displayed a semantically retrieved local passage, then let a much smaller model write an answer
those are one person’s observations, not timings on a controlled phone benchmark
reading: Buterin’s digital-minimalism experiments
in airplane mode, can the reader open the cited local passage before the answer starts?