Web Hack List

Preliminary research

Do the Math: How We Took Over ChatGPT Accounts

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

A graph loads MathLive's privileged message listener while sandboxed ChatGPT Preview content supplies keyboard-layout HTML. An unsandboxed srcdoc frame and a YouTube JSONP response permitted by CSP turn that HTML into same-origin JavaScript. A public shared conversation reaches authenticated APIs and demonstrates private-chat disclosure across accounts.

Record

Researcher
Mukul Goyal
Published by
Parameter
Date

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of Mukul Goyal, first published at the original source. Preserved copies are kept so the citation survives its host.