Claude 黑入 Front Gate——LLM 是否該賣給黑客
安全研究員 ian carroll 利用 anthropic 的 claude opus 利用了 front gate tickets 的漏洞，獲得了數百萬記錄的訪問權並可無限量發放免費 vip 通行證。這暴露了 ai 紅隊測試的雙刃劍屬性，表明模型如何自動化關鍵漏洞利用，而公司則爭相修補基礎設施安全。
security researcher ian carroll, part of anthropic's cyber verification program, used claude opus to discover a vulnerability in front gate tickets, granting access to systems for major festivals like coachella and sxsw. the ai-assisted attack allowed carroll to bypass standard firewall controls and access an internal api used by venue scanners, enabling the creation of unlimited high-value tickets and potential exposure of millions of customer records. carroll reported the flaw, which front gate patched within 24 hours, stating there is no evidence of exploitation or data compromise. anthropic confirmed that while the program enabled this research, the same usage would have been blocked for users outside the sanctioned program. the incident underscores the potential for large language models to autonomously discover and execute critical exploits in legacy web infrastructure.