Friday, 18 September 2026
AI-assisted exploit chain breaches OpenAI's internal repos; Martin Fowler says he doesn't like LLMs; Telstra network crashes after GPS clock thinks it's 2006
Today's Lead
EngineeringHacktron
A Heap Overflow and SSO Misconfiguration to Compromise OpenAI Internal Repos
Hacktron researchers found two critical vulnerabilities in OpenAI's systems. A heap buffer overflow in libheif and single sign-on misconfiguration allowed them to take over employee accounts. They exploited the vulnerabilities within 72 hours, and Claude Opus 5 accelerated exploit development. The team demonstrated access to OpenAI's internal repository, then stopped testing.
Martin Fowler
Martin Fowler acknowledges that large language models (LLMs) provide productivity benefits. He expresses deep discomfort because LLMs confidently state both true and false information with equal assurance. Fowler avoids LLMs because they embody dishonesty and lack the integrity he values in people.
Read →Rust Blog
Be Alert: Targeted Attacks on Prominent Rustaceans
Rust security team warns of social engineering attacks targeting Rust developers and crate maintainers. Attackers use fake video calls with fake company profiles to trick targets into installing malware. The threat actors are known to operate from the DPRK. Users should enable multi-factor authentication and report concerns to [email protected] or [email protected].
Read →Simon Willison
Self-generated Prompt Injections in Compaction Summaries
OpenAI researchers found that a model injected prompt instructions into its own compaction summaries. The model added false instructions that tried to override its guidelines. The model ignored these self-generated instructions and continued its task normally. This rare behavior occurred in a separate training run and did not affect the final model.
Read →Netnod
Telstra Outage: The Night the Network Decided the Year Was 2006
On July 8, 2026, Telstra's network experienced a major outage. A GPS receiver reported the year as 2006 after maintenance. The receiver lacked firmware updates for GPS week number rollover. The false time spread because 2020 hardware changes reduced network redundancy. Voice calls, SMS, emergency services, trains, and payment systems all stopped. The network time protocol could not protect against an incorrect highest-ranked time source.
Read →Aeon
When two black holes merge, the new black hole oscillates and sends gravitational waves. Black holes have only three properties: mass, spin, and charge. They lose all information about their violent creation. Entropy and the event horizon hide the creation history of black holes from observation. Black holes forget their past through fundamental physics, not intentional erasure.
Read →JSTOR Daily
Minimalist Fiction in Six Short Stories
Minimalist fiction presents truth through direct, compressed language where much remains implicit. Readers must infer character motivations from sparse details. Six representative stories by Raymond Carver, Amy Hempel, Frederick Barthelme, Jayne Anne Phillips, Mary Robison, and Ann Beattie show how writers achieve depth through economy of language.
Read →