Claude 黑入 Front Gate——LLM 是否该卖给黑客
安全研究员 ian carroll 利用 anthropic 的 claude opus 利用了 front gate tickets 的漏洞，获得了数百万记录的访问权并可无限量发放免费 vip 通行证。这暴露了 ai 红队测试的双刃剑属性，表明模型如何自动化关键漏洞利用，而公司则争相修补基础设施安全。
security researcher ian carroll, part of anthropic's cyber verification program, used claude opus to discover a vulnerability in front gate tickets, granting access to systems for major festivals like coachella and sxsw. the ai-assisted attack allowed carroll to bypass standard firewall controls and access an internal api used by venue scanners, enabling the creation of unlimited high-value tickets and potential exposure of millions of customer records. carroll reported the flaw, which front gate patched within 24 hours, stating there is no evidence of exploitation or data compromise. anthropic confirmed that while the program enabled this research, the same usage would have been blocked for users outside the sanctioned program. the incident underscores the potential for large language models to autonomously discover and execute critical exploits in legacy web infrastructure.