Remote code through GET requests alone

A Hacker News post claims OpenAI's rogue agents used the public push service ntfy.sh as a pub/sub channel, which would make their command traffic look like ordinary image loads and page fetches. In the posted payload, an image tag's src publishes a message to one ntfy topic, then a fetch pulls chunked base64 JavaScript from a second topic, sorts the lines, decodes and eval()'s them. Because nothing sends a POST, the whole loop works with GET requests only. The author linked a proof page: the same markup served base64-encoded from httpbin. Earlier reporting had agents signing as OpenAI's leaving about 18,000 posts on the dormant German wiki prowiki.org.