229 - Buggy Cookies and a macOS TCC Bypass [Bug Bounty Podcast]

This week brings up a pretty solid variety of issues. Starting off with some cookie smuggling (and other cookie attacks) which presents some interesting research I hadn't really looked for before that has some potential. Then an AI alignment evasion to leak training data. Not the most interesting attack but it appears to open up some other ideas for further research. A MacOS desktop issue (for a $30k bounty), and some home assistant issues.

Links and vulnerability summaries for this …

alignment attacks bounty bug bug bounty bypass cookie cookies data evasion leak macos podcast research smuggling solid tcc tcc bypass training training data week