Computer-Use and TOCTOU: What You Click Is Not What You Get!

Last year, Jun Kokatsu disclosed an with ChatGPT Operator by exploiting a race condition. I was wondering if I could reproduce this attack chain, and this post describes the results of that research. I had this post drafted for months, and yesterday at the I included a video demo of this attack in m…

View Post on Scour ↗

More from Embrace The Red on Scour.

Covers 2 stories including New comment by astrange in "Claude wrote a functional NES emulator using my engine's API"