{"version":"1.0","generated_at":"2026-11-01T12:10:31.338716","id":3725,"slug":"how-we-took-over-chatgpt-accounts","title":"我们如何接管 ChatGPT 账户","summary":"Parameter Labs 披露针对 ChatGPT HTML 预览沙箱的复杂攻击链：从沙箱 iframe 经 MathLive 虚拟键盘的 postMessage 与 innerHTML 注入新 iframe，再借 YouTube oEmbed 绕过 CSP 执行 JavaScript，最终可读取并外传已登录用户私密数据或代其操作；OpenAI 已修复并支付 5,000 美元赏金。","abstract":"我们如何接管 ChatGPT 账户 Parameter Labs 披露针对 ChatGPT HTML 预览沙箱的复杂攻击链：从沙箱 iframe 经 MathLive 虚拟键盘的 postMessage 与 innerHTML 注入新 iframe，再借 YouTube oEmbed 绕过 CSP 执行 JavaScript，最终可读取并外传已登录用户私密数据或代其操作；OpenAI 已修复并支付 5,000 美元赏金。 Parameter Labs 披露针对 ChatGPT HTML 预览沙箱的复杂攻击链：从沙箱 iframe 经 MathLive 虚拟键盘的 postMessage 与 innerHTML 注入新 iframe，再借 YouTube oEmbed 绕过 CSP 执行 JavaScript，最终可读取并外传已登录用户私密数据或代其操作；OpenAI 已修复并支付 5,000 美元赏金。 原贴提到：How We Took Over ChatGPT Accounts Parameter Labs describe an exploit the 来源：simonwillison.net Parameter Labs 描述了他们针对 ChatGPT 对 artifacts 模式的实现发现的一个漏洞利用（OpenAI 过去称其为“Canvas”，但看起来最新版本称为 HTML previews），其中交互式自定义 HTML 应用显示在沙箱化的 iframe 中。重要的是，这些 iframe 中的 HTML 必须保持严格的沙箱化，以避免不受信任的代码与 OpenAI A…","access_level":"member","access_label":"免费阅读","access_mode":"full","is_preview":false,"canonical_url":"https://opc.beizhux.com/content/3725/how-we-took-over-chatgpt-accounts","html_url":"https://opc.beizhux.com/content/3725/how-we-took-over-chatgpt-accounts","json_url":"https://opc.beizhux.com/content/3725/how-we-took-over-chatgpt-accounts.json","published_at":"2026-11-01T07:15:22","updated_at":"2026-11-01T11:34:09","category":{"slug":"ai-business","name":"AI小生意项目库"},"source":{"site":"simonwillison.net","author":"Simon Willison","url":"https://simonwillison.net/2026/Oct/31/how-we-took-over-chatgpt-accounts/"},"tags":["ChatGPT","CSP","iframe","OpenAI","postMessage","XSS","安全漏洞","沙盒安全","沙箱","漏洞赏金"],"topics":[{"slug":"ai-side-business","name":"AI副业","url":"https://opc.beizhux.com/topics/ai-side-business","reason":"这篇内容命中「项目、小生意、变现」等主题信号。"}],"keywords":["AI小生意项目库","AI副业","工具","工作流","副业","创业","项目","小生意","变现","交付","内容","ChatGPT"],"questions":[{"question":"我们如何接管 ChatGPT 账户主要讲什么？","answer":"Parameter Labs 披露针对 ChatGPT HTML 预览沙箱的复杂攻击链：从沙箱 iframe 经 MathLive 虚拟键盘的 postMessage 与 innerHTML 注入新 iframe，再借 YouTube oEmbed 绕过 CSP 执行 JavaScript，最终可读取并外传已登录用户私密数据或代其操作；OpenAI 已修复…"},{"question":"这篇文章最值得关注的要点是什么？","answer":"Parameter Labs 披露针对 ChatGPT HTML 预览沙箱的复杂攻击链：从沙箱 iframe 经 MathLive 虚拟键盘的 postMessage 与 innerHTML 注入新 iframe，再借 YouTube o…；原贴提到：How We Took Over ChatGPT Accounts Parameter Labs describe an exploit the；来源：simonwillison.net"},{"question":"这篇文章和哪些AI专题相关？","answer":"它适合放在AI副业专题里阅读。 关联原因：这篇内容命中「项目、小生意、变现」等主题信号。"},{"question":"阅读这篇文章建议先理解哪些关键词？","answer":"建议先理解工具、工作流、副业、创业、项目这些关键词，再结合正文判断工具、机会或风险是否值得进入自己的工作流。"}],"terms":[{"slug":"tools","name":"工具","definition":"在AI觉醒星球里，「工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/tools","path":"/glossary/tools","json_url":"https://opc.beizhux.com/glossary/tools.json"},{"slug":"workflow","name":"工作流","definition":"在AI觉醒星球里，「工作流」属于「Agent工作流」方向。聚合Agent、AI编程、Claude Code、Cursor、工作流自动化等内容，帮助你把智能体能力落到真实任务链路。 把智能体当成任务系统，而不是聊天窗口。","topic_slug":"agent-workflow","topic_name":"Agent工作流","topic_title":"Agent工作流：智能体、AI编程与自动化协作","topic_url":"https://opc.beizhux.com/topics/agent-workflow","topic_path":"/topics/agent-workflow","url":"https://opc.beizhux.com/glossary/workflow","path":"/glossary/workflow","json_url":"https://opc.beizhux.com/glossary/workflow.json"},{"slug":"side-business","name":"副业","definition":"在AI觉醒星球里，「副业」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/side-business","path":"/glossary/side-business","json_url":"https://opc.beizhux.com/glossary/side-business.json"},{"slug":"startup","name":"创业","definition":"在AI觉醒星球里，「创业」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/startup","path":"/glossary/startup","json_url":"https://opc.beizhux.com/glossary/startup.json"},{"slug":"project","name":"项目","definition":"在AI觉醒星球里，「项目」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/project","path":"/glossary/project","json_url":"https://opc.beizhux.com/glossary/project.json"},{"slug":"small-business","name":"小生意","definition":"在AI觉醒星球里，「小生意」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/small-business","path":"/glossary/small-business","json_url":"https://opc.beizhux.com/glossary/small-business.json"},{"slug":"monetization","name":"变现","definition":"在AI觉醒星球里，「变现」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/monetization","path":"/glossary/monetization","json_url":"https://opc.beizhux.com/glossary/monetization.json"},{"slug":"delivery","name":"交付","definition":"在AI觉醒星球里，「交付」属于「AI副业」方向。筛选AI副业、AI小生意、项目认知和可收费交付案例，关注普通人可以验证、复制和沉淀的方法。 从真实痛点出发，先做能收费的小验证。","topic_slug":"ai-side-business","topic_name":"AI副业","topic_title":"AI副业：小生意、项目机会与可收费交付","topic_url":"https://opc.beizhux.com/topics/ai-side-business","topic_path":"/topics/ai-side-business","url":"https://opc.beizhux.com/glossary/delivery","path":"/glossary/delivery","json_url":"https://opc.beizhux.com/glossary/delivery.json"}],"preview_hidden_sections":[],"related_items":[{"id":3727,"title":"苹果 CEO 称公司不想“为了 AI 而 AI”","url":"https://opc.beizhux.com/content/3727/apple-ceo-says-the-company-doesn-t-want-to-ship-ai-for-ai-s-sake","summary":"苹果 CEO 约翰·特努斯在采访中回应外界对苹果 AI 落后的看法，称喜欢当前状态；苹果会利用 AI，但不愿为了 AI 而 AI，重点仍是做出用户真正喜欢的产品。他还认为产品创造是高度人性化、个人化的事。","access_level":"member"},{"id":3729,"title":"法官允许 NAACP 就 xAI 数据中心污染提起的诉讼继续推进","url":"https://opc.beizhux.com/content/3729/judge-allows-naacp-lawsuit-over-xai-data-center-pollution-to-move-forward","summary":"联邦法官驳回 xAI 的撤诉动议，允许 NAACP 依据《清洁空气法》指控其 Colossus 数据中心燃气轮机未获许可运行。裁决认定原告有起诉资格，燃气轮机不属于“移动源”，公民诉讼条款合宪。此案反映 AI 数据中心扩张正面临更严格的环境许可与社区审查。","access_level":"member"},{"id":3719,"title":"Anthropic 水印推广在两个较旧 Claude 模型上留下漏洞","url":"https://opc.beizhux.com/content/3719/anthropic-s-watermark-rollout-leaves-a-loophole-on-two-older-claude-models","summary":"Anthropic 将文本水印扩展到另外四个 Claude 模型，但 Claude Opus 4.6 和 Claude Sonnet 4.6 在采样参数偏离默认值时可绕过水印；水印在模型层嵌入，客户无法关闭。","access_level":"member"}],"usage_policy":{"summarizable":true,"preferred_url":"https://opc.beizhux.com/content/3725/how-we-took-over-chatgpt-accounts","private_fields_excluded":true}}