Codex scraped the ICM website and discovered 2026 Fields Medal winner list

https://phemex.com/news/article/2026-fields-medal-winners-list-leaked-includes-two-peking-university-alumni-92948

32•zaikunzhang•1h ago

Comments

ashu1461•42m ago

Someone used Codex to scrape the ICM website schedule and discovered that the winners list was simply hidden in the front-end code with a "hidden" tag

This is on the devs and feels like a very basic leak which could have exploited in the non LLM world as well.

ajb•22m ago

Yeah that happens all the time. Anyone/thing with popular public releases has fans/journeys scraping the website looking for unreleased material or scoops.

In the early days one of the high profile soaps in the UK published their "catch up" summaries for the week ahead which you could get just by editing the date in the URL. But back then not so many people were looking, so they were doing it for months...

rurban•34m ago

It's Wang Hong, my god. Cannot they still don't write proper Chinese names?

bananaflag•30m ago

Wikipedia says Hong Wang while acknowledging that the native form is Wang Hong and that they are using the Western name order.

grommz•5m ago

Nobody says Jinping Xi or Zedong Mao.

bananaflag•29m ago

This is sad, almost as sad as the Deathly Hallows pre-release leak.

zaikunzhang•27m ago

Related to the earlier discussion:

https://news.ycombinator.com/item?id=48902814

Reddit: https://www.reddit.com/r/math/comments/1urv4id/comment/oxak6...

picafrost•26m ago

> Hong Wang will become the third female mathematician in history to receive the Fields Medal

Interestingly, if true, it will also be the first time an MIT PhD graduate has won the Fields Medal.

edoceo•25m ago

I've been working on a site. It's new, domain is only a few weeks old. It's got SSL, so all the bots know it exists. It's never had any sub-pages exposed, just the placeholder lander, no links.

Somehow in Google search one of the unguessable pages is indexed. We have used Claude and Gemini to assist with some design aspects.

I'm thinking some aggressive data ingestion/indexing is happening by all the bots in the quest for frontier models.

resonious•18m ago

I've also seen Google indexing pages with random values in the path that don't get linked to statically (server asks for the URL then redirects to it immediately). I'm pretty sure they index straight out of the Chrome address bar.

foobarbecue•13m ago

Holy crap I hope that's not true. I've also had unguessable pages indexed, though, and don't have an explanation.

nicce•7m ago

Something worth inspecting further. We know that Chrome stores and sends the browsing history but this is an interesting vector.

st_goliath•4m ago

Yep. I remember a similar story as GP described from a friend back in 2008. The site he was working on that wasn't linked to yet was suddenly indexed after he checked out what it looked like in the new "Chrome" browser that Google had just released, causing some moderate panic on his end.

micromacrofoot•6m ago

ai bots will have more privacy than we do

efficax•5m ago

twist: codex also wrote the code that placed the winners list in a hidden element

Switching an LLM's tier changes its "best tool" answer about half the time

Show HN: Proton – A pure Go GUI library with zero CGO and API immunity

Show HN: I RL-trained an agent that trains models with RL (for –$1.3k)

Beautiful Type Erasure with C++26 Reflection

Now, defenders are embracing the prompt injection, too

Lenz – A fact-checking API for AI-generated content

Show HN: EdgarKit – a real-time JSON API for SEC EDGAR filings

The Unexamined Model Is Not Worth Training

A Trusty Boot Key (Ventoy Alternative), for Bastille Day

We need a PIT Crew for news

The US-China AI arms race has taken an unexpected turn

Using self-hosted Umami for iOS app analytics

Lessons learned by a non-developer learning to deploy apps in production

Microsoft Surface Laptop 8 review

Human rabies despite PEP: review of breakthrough cases after zoonotic exposures

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Don't Panic Cyberdeck

Coding agents think ahead of time

Ask HN: Should I Promote My SaaS to get first 100 Customers without budget

Show HN: PDF to Markdown with a side-by-side check so you can see what broke

Jailbroken Gemini spun up new C2 server for Russian fraudster in just 6 minutes

Michael Freedman: Compression Is All You Need [video]

Convert local – A 100% private, client-side file converter

Argentina court recognizes two goldfish as sentient beings with rights

Show HN: 3D printer simulator with in browser firmware execution

I automated the $2k investing course into a daily ticker alert

The Boundary of Computation(2023) [video]

Adapting offensive security for the AI agent age

Differentiable Fortran with LFortran and Enzyme

Cutia: Open-source video editing tools like CapCut that can be used in a browser