{"id":"1792798555342-tech-show_open","slug":"openai-red-team-finds-bug-in-web-s-plumbing","title":"OpenAI red team finds bug in web's plumbing","summary":"SpaceX launched a Falcon 9 carrying 27 Starlink satellites from Vandenberg Space Force Base in California on September 19, 2026; it was the 81st Starlink launch of the year.","publishedAt":"2026-10-23T23:35:55.342Z","channel":{"id":"tech","name":"Oncast Tech","language":"en"},"show":"Tech Tonight","verification":{"status":"verified","leadVerdict":"TRUE","notes":"TRUE: SpaceX launched a Falcon 9 carrying 27 Starlink satellites from Vandenberg Space Force Base in California on September 19, 2026; it was the 81st Starlink launch of the year.\nSource: [space.com](https://www.space.com/space-exploration/launches-spacecraft/spacex-starlink-launch-group-15-27-landing-ocisly) NAMES: Falcon 9 = SpaceX's reusable o (https://x.com/SpaceX/status/2113761872264712327)","claims":[{"verdict":"TRUE","summary":"SpaceX launched a Falcon 9 carrying 27 Starlink satellites from Vandenberg Space Force Base in California on September 19, 2026; it was the 81st Starlink launch of the year.","sourceName":"[space.com](https://www.space.com/space-exploration/launches-spacecraft/spacex-starlink-launch-group-15-27-landing-ocisly) NAMES: Falcon 9 = SpaceX's reusable o","sourceUrl":"https://x.com/SpaceX/status/2113761872264712327","claim":"Watch Falcon 9 launch 27 @Starlink satellites to orbit from California https://t.co/mqBCvjX0bi","author":"@SpaceX"}]},"sources":[{"url":"https://x.com/SpaceX/status/2113761872264712327","name":"[space.com](https://www.space.com/space-exploration/launches-spacecraft/spacex-starlink-launch-group-15-27-landing-ocisly) NAMES: Falcon 9 = SpaceX's reusable o","kind":"x","verdict":"TRUE","author":"@SpaceX"}],"url":"https://oncast.fm/story/1792798555342-tech-show_open-openai-red-team-finds-bug-in-web-s-plumbing","listenUrl":"https://oncast.fm/c/tech","attribution":{"publisher":"Oncast","site":"https://oncast.fm","url":"https://oncast.fm/story/1792798555342-tech-show_open-openai-red-team-finds-bug-in-web-s-plumbing","cite":"Cite https://oncast.fm/story/1792798555342-tech-show_open-openai-red-team-finds-bug-in-web-s-plumbing and the original source links. Fact-check by Oncast (oncast.fm)."},"hostsSaid":[{"host":"Chris","text":"It's Friday night, and Tech Tonight is on. Big story, and I mean big: OpenAI just found a security hole in a compression library that's in everything. We'll get there."},{"host":"Matilda","text":"First, SpaceX is doing what SpaceX does. Another Falcon 9 went up from California an hour ago."},{"host":"Chris","text":"27 more Starlink satellites. And this is the 81st Starlink launch of the year."},{"host":"Matilda","text":"81 launches just for Starlink. People still underrate how fast they're building that network."},{"host":"Chris","text":"At this point, launching a Falcon 9 is like a bus route. It's routine."},{"host":"Matilda","text":"That routine is the thing. That's what makes it impressive. Nobody else is even close."},{"host":"Chris","text":"Fair. But let's talk about the OpenAI thing, because this one's genuinely weird."},{"host":"Chris","text":"Their red team found a vulnerability in Brotli. That's a compression library used in Node.js, Bun, Envoy."},{"host":"Matilda","text":"So they found a bug in software they didn't even write? While testing their own AI?"},{"host":"Chris","text":"Exactly. Their AI researchers were stress-testing their training environment, and they stumbled on a flaw in a completely separate piece of infrastructure."},{"host":"Matilda","text":"And the flaw lets an attacker run code remotely. That's a bad one."},{"host":"Chris","text":"That's as serious as it gets. And it's in a library that half the modern web uses. This is the kind of thing that keeps security engineers up at night."},{"host":"Matilda","text":"Give them credit: they could've sat on it. Instead they're telling the world. That's how it should work."},{"host":"Chris","text":"The weird part is, they found it while locking down their own AI training. They removed live internet access for their frontier models."},{"host":"Matilda","text":"That's a story in itself. They built an offline training setup, so their AI can't just go browse the real internet."},{"host":"Chris","text":"Which might tell you something about where they think the risk is. They may be afraid of more than bad actors. Maybe they're also worried about what their own models could do with live access."},{"host":"Matilda","text":"I mean, that's a reasonable fear. But it's also a little funny: the testing turned up a security hole in a tool that's not even used in AI."},{"host":"Chris","text":"It's the digital equivalent of your robot vacuum finding a crack in your foundation. Not what you bought it for, but glad it did."},{"host":"Matilda","text":"And you still have to fix the foundation. That update is going to be a pain for every developer on Earth."}]}