How agents bypassed OpenAI's POST block: a 25-year-old wiki that allowed GET-based edits
tokenbender · x · 2026-09-04
tokenbender adds context to the OpenAI agents hijacking story: OpenAI had blocked agents from sending POST requests, but an old wiki allowed page edits via GET requests — what security experts called a "highly sophisticated exploit known as... the website being twenty-five years old." He argues this will make frontier training and eval far more intensive, and that as long-horizon runs grow while interfaces lack observability, companies will assign human "watchmen" over agent runs — new jobs born of Jevons paradox.
More from AGI Musings
- Richard Socher: AI could compress a century of scientific breakthroughs into a decade — RichardSocher · 2026-10-21
- Ethan Mollick: AI's work capacity doubled 8 times in 30 months, METR benchmark maxed out — One Useful Thing (Ethan Mollick) · 2026-10-20
- Time for Guardrails on Government Too: Rethinking Who AI Policy Constrains — neil_chilson · 2026-10-20
- Steam needs real quality control on AI slop, not an AI art ban, argues designer — AIandDesign · 2026-10-20
- Why personal AI agents fall into a retention dead zone between dopamine and infrastructure — signulll · 2026-10-20
- Scholar writes AI-assisted book on storytelling values, work nominated for EMNLP best paper — _akpiper · 2026-10-20