Live data from Hacker News

Codex scraped the ICM website and discovered 2026 Fields Medal winner list

phemex.com

41–50 of 119 posts

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#41
post #37

Earlier quoted context omitted.

Holy crap I hope that's not true. I've also had unguessable pages indexed, though, and don't have an explanation.

There's no reason to think it isn't true. It matches every pattern of behavior observed from every tech company.

Why don’t they also read your gmail and get your bank passwords?

And maybe have access to EVERY site actually, with “forgot password” type stuff in addition to providing oauth tokens…

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#42
post #21
post #12

Earlier quoted context omitted.

Something worth inspecting further. We know that Chrome stores and sends the browsing history but this is an interesting vector.

I’d be more surprised if they weren’t capturing this information. Especially if you have autocomplete-while-searching type of features on.

Why don’t they also capture information you enter into forms on Chrome?

They control the entire browser surface, technically they can know everything, even TLS and E2E encrypted data, that they silently phone home…

If you think this is silly, consider that Microsoft Recall had been observing everything on people’s entire SCREENS and phoning home much of it. That is how a guy was caught recently: https://x.com/t3chfalcon/status/2074134314145489195

And it is actually much worse than even that:

https://community.qbix.com/t/increasing-state-of-surveillanc...

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#43
post #8

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links. Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects. I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the ques…

Chat programs catch links you send.

Also that browser setting to check urls are safe sends them out “sometimes“.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#45
post #8

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links. Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects. I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the ques…

I've also seen Google indexing pages with random values in the path that don't get linked to statically (server asks for the URL then redirects to it immediately). I'm pretty sure they index straight out of the Chrome address bar.

This may have been part of this issue I found a few months back, as no other explanation for how UUID URLs got indexed was found: https://news.ycombinator.com/item?id=47769796

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#46
post #35
post #2

Someone used Codex to scrape the ICM website schedule and discovered that the winners list was simply hidden in the front-end code with a "hidden" tag This is on the devs and feels like a very basic leak which could have exploited in the non LLM world as well.

Most of what an LLM does "could have" been done by a human if you throw enough human hours at it. But the reality in this circumstance is that a new tool helped find this leak. Saying this could have happened in a "non LLM world" is analogous to "someone else could have discovered special relativity, let's not mention Einstein"

This not only could have happened pre-llm, it did: https://krebsonsecurity.com/2022/02/report-missouri-governor...

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#47

Earlier quoted context omitted.

I've also seen Google indexing pages with random values in the path that don't get linked to statically (server asks for the URL then redirects to it immediately). I'm pretty sure they index straight out of the Chrome address bar.

Holy crap I hope that's not true. I've also had unguessable pages indexed, though, and don't have an explanation.

It’s absolutely true. It is a documented fact. It was discovered and entered into public record during the DOJ antitrust investigation into Google Chrome.

They call the signal „popularity“ and it is a successor of the Google Toolbar signal.

https://www.justice.gov/opa/pr/department-justice-wins-signi...

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#48
post #15

Earlier quoted context omitted.

Nobody says Jinping Xi or Zedong Mao.

Well, some do say Jinping the Eleventh …

And Kim Jong the Second, which was confusing since he was actually the second Kim.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#49
post #41
post #37

Earlier quoted context omitted.

There's no reason to think it isn't true. It matches every pattern of behavior observed from every tech company.

Why don’t they also read your gmail and get your bank passwords? And maybe have access to EVERY site actually, with “forgot password” type stuff in addition to providing oauth tokens…

> Why don’t they also read your gmail

Boy do I have news for you.

Re: Codex scraped the ICM website and discovered 2026 Fields Medal winner list

#50
post #8

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links. Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects. I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the ques…

They log all DNS requests made to their public resolver in a searchable internal database, at least when I worked there a decade or so ago. I wonder if they seed their crawler with it?
Post reply on HN