A security lab's responsible disclosure kept a billion phones' cameras private
ccerrato147 · x · 2026-09-19
depthfirst discovered a TikTok camera-related vulnerability — found using dfs-large1, their security model post-trained on GLM 5.2 (an MIT-licensed, 753B-parameter open-weights model) — and told TikTok, worked with them, and waited for the patch before publishing any footage. No user's camera was abused.
The author's takeaway: a billion phones stayed private because a funded lab decided to send an email first, pushing back on headlines framing free AI software as a "supercharger for hackers."
Related event: Critical TikTok Flaw Let Attackers Access Camera, Mic and Payment Data(4 posts)→
More from Safety
- Anthropic says it may imminently hit RSP threshold for AI-accelerated R&D, releases provable inference work — tobyordoxford · 2026-11-04
- Hackers reset French blood service freezers from -30°C to 110°C in supply-chain cyberattack — LuizaJarovsky · 2026-11-04
- Google says it removed post-employment non-disparagement clauses from new-hire terms — HaydnBelfield · 2026-11-04
- Claude doesn't really forget: Anthropic's privacy policy allows records retention up to 7 years — nikola_mr64990 · 2026-11-04
- Polymarket opens a market on Anthropic's next AI sandbox escape — Polymarket · 2026-11-04
- Rival company blames 'AI gone off the rails' after founder catches it hacking his network — AccBalanced · 2026-11-04