A 16 year old boy hacked an internal Microsoft system called TITAN with 17 trillion records as it didn’t validate JWT signatures at all, accepted ‘admin’ as authentication without a password and was internet facing.
They paid him $5000 and told nobody about it.
https://blog.faav.net/how-i-couldve-accessed-17-trillion-microsoft-records
@GossiTheDog
This clever hacker also leverage Codex and Claude during hacking, orchestrated by a customised AI Antares.
if this guy call LLM #aislop and refused to use, the good thing probably won't happen