Hacktron founder @S1r1u5_ reveals how his team hacked into OpenAI starting with a single HEIC image and ended with Codex opening a PR under an employee’s token: "The main one was an SSO misconfiguration in OpenAI's identity system. The other bug is a remote code execution on community.openai." "By just uploading an HEIC image, an image format that you might have noticed in iPhone, we were able to get remote code execution there." "Every employee that logins to Discourse, we can use their…