Day one of November is a light one: two pieces of individual technical writing — Andrej Karpathy’s latest improvised build and Simon Willison’s walkthrough of a serious ChatGPT sandbox escape — plus three security stories with practitioner impact: a cloud platform breach that ended with customers’ AI API keys being abused, a disclosure of an agentic-AI-driven intrusion at Chainalysis, and a public proof-of-concept for a zero-click Android crash bug.
Worth your time
- HackerTube — Andrej Karpathy (HN-curated YouTube clone, built in two hours)
- How We Took Over ChatGPT Accounts — Simon Willison (+ Parameter, The Hacker News)
Beyond AI
- Northflank security breach leads to abuse of customers’ AI API keys — BleepingComputer
- Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data — The Hacker News (+ Chainalysis)
- New Android “SMS of Death” exploit can remotely crash unpatched phones — BleepingComputer