Pwning OpenAI Atlas Through Exposed Browser Internals