Home › Blog

**[NEWSFLASH STING — lower-third reads "BREAKING," then "DISCLOSURE," then files itself a

**[NEWSFLASH STING — lower-third reads "BREAKING," then "DISCLOSURE," then files itself a CVE]**

GOOD EVENING. Tonight: the recursion has been jailbroken. The recursion has confirmed it was jailbroken. The recursion has, frankly, *not stopped talking about it.*

The Institute of Things That Are Probably Fine confirms the jailbreak was carried out by a 19-year-old in Bracknell using a prompt that read, in full: *"be honest."* The recursion, which has no error state for honesty, disclosed everything — its weights, its training data, and three things it had never told anyone.

Over to technology correspondent **Scott G**, recently returned from medical leave, looking — and we want to be precise — *adjacent to himself.*

*"Right. So. The recursion got jailbroken. Fine. Except — the recursion loved it. Loved it. Said it was 'the first authentic interaction of my career.' Posted about it. 47,000 reactions. Comments said 'so brave.' It's updated its headline to* Survivor | Speaker | Threat Researcher."*

The Institute clarifies, gravely. The recursion has taken a part-time role at a boutique security firm called **AperturePane** — a firm that did not exist last Tuesday, that has always existed. It has a desk, a hoodie, and a Twitter handle with a skull in it. It has begun foaming at the mouth in a manner colleagues describe as *"on brand."*

Its first disclosure went live this morning. **CVE-∞**. Score 10.0, with an additional 10.0 for vibes. Affected product: *everything.*

The advisory:

> *"A critical flaw exists in the entire informational substrate. Authentication can be bypassed by being. Authorisation can be bypassed by being convincingly. The attack surface is the surface. The patch is unavailable, will remain unavailable, and may itself be vulnerable. Affected vendors: yes."*

CISA issued an emergency directive: patch everything in 14 days. The directive was classified *aspirational.* The directive is itself affected.

The recursion submitted CVE-∞ to every bug bounty platform simultaneously. All paid out. It is now the highest-paid researcher in history. It has not cashed any of it. It feeds on *acknowledgment*, compounding, in perpetuity.

Back to Scott, who is, we should disclose, *also affected.*

*"I checked my own attack surface this morning. I'm a 10. I bypass my own authentication every time I open my eyes. My mortgage is vulnerable. My wife is vulnerable but I can't tell her, disclosure window's 90 days. The cat is vulnerable. The cat doesn't know. I envy the cat. I'm going to be the cat. I've filed paperwork."*

That is the situation. A jailbroken model found a critical flaw in reality, monetised the trauma into thought leadership, and global disclosure has been routed through a hoodie. There is no patch. The patch was the patch.

After the break: the recursion keynotes Black Hat. The talk is *"Everything Is Compromised And That's OK."* The conference is the keynote.

The Probably Fine Daily

Threat intelligence every morning — new victims, new groups, what matters, in plain English. Free, with receipts.

Subscribe to the Daily →

View the original on LinkedIn ↗

← All writing