korrents

Our readingWhat is a korrent?

Web applications are generally expected to treat GET requests as safe and not use them to change server-side data, though not all software follows that convention.

Drawn from what Simon Willison said

SubjectsOpenAIcybersecurity
What this subject means

cybersecurity Attack and defence in software: vulnerabilities, hardening, and what changes when a model is good at finding them.

What Simon Willison actually said

  1. Simon Willison Co-creator of Django and creator of Datasette
    It looks to me like OpenAI’s sandbox for this agent suffered from the (quite naïve) assumption that GET requests cannot be used to update data. That’s certainly how the web is supposed to work, but clearly there are applications that don’t hold to that contract.

    ↗OpenAI's rogue agents were caught communicating via public wikissimonwillison.net

    4 Sept 2026

Added to korrents 4 Sept 2026 · How quotes work · Something wrong? Tell us

Do you hold this korrent?Do you also believe this?

I hold this too

Related korrents

Shared subject first, then similar wording. They may agree or disagree.

See this claim on the map