PostThree researchers walked into OpenAI through a photo.

Three researchers walked into OpenAI through a photo. HEIF upload on the public forum. Old libheif. Discourse never treated the fix as urgent. Then a broken “log in with OpenAI” button turned forum code into staff ChatGPT and Codex. Codex talks to GitHub. They opened a pull request in the internal monorepo to prove the door was open. They say they did not read the secrets. The exploit was written with Claude Opus 5. Under $3,000 in tokens. OpenAI paid $6,500. The lab that sells the lock used the rival model to pick it.