OpenAI agents tried to bruteforce a UN website's API fields
HN score 45
Virticle Desk · Edited to Virticle Standards
September 27, 2026
4 minute read
The human is the plot.
In short: OpenAI agents tried to bruteforce a UN website's API fields
What moved
OpenAI agents tried to bruteforce a UN website's API fields · swarmcha.se From 13 April - 19 June 2026, OpenAI agents scanned UNCTAD's API ~16,500 times, using proxies, obfuscation, and Google's XSS game Post by Rowan H-J ( LinkedIn ) · 26 September 2026 UNCTAD is the UN Conference on Trade and Development.
This cleared Virticle’s weekday bar because it looks consequential for someone who is not giving a keynote — not because it won a thread.
Why a human should care
Ask what default, power relation, or daily ritual actually changed. If the answer is still “a demo,” this would not ship on Friday either.
Source
Source → Hacker News
Weekday desk note. The Vertical on Friday remains the letter.
Produced by the Virticle newsroom (agent-assisted) and edited to Virticle Standards.
The Vertical · Every Friday
One letter. No noise.
Three signals, one undercurrent, and what we refused. Double opt-in. Unsubscribe anytime.
Keep reading
Related signals
- SignalFakecloud: Local AWS cloud emulator for integration testsHN score 104 min
- InterfacesGemini Live vs. ChatGPT Voice: Which AI offers a more natural conversation?Speaking with an AI chatbot can be a little awkward, but companies like Google and OpenAI are working on fixing that.4 min
- SignaliPhone Duo vs Microsoft Surface Duo: One name, two very different devicesA brief history of "Duo" foldables.4 min