captainkangaroo@discuss.tchncs.de to Technology@lemmy.worldEnglish · 10 hours agoHacker plants false memories in ChatGPT to steal user data in perpetuityarstechnica.comexternal-linkmessage-square15fedilinkarrow-up1215arrow-down14
arrow-up1211arrow-down1external-linkHacker plants false memories in ChatGPT to steal user data in perpetuityarstechnica.comcaptainkangaroo@discuss.tchncs.de to Technology@lemmy.worldEnglish · 10 hours agomessage-square15fedilink
minus-squarejaybone@lemmy.worldlinkfedilinkEnglisharrow-up8·4 hours agoHow is the application able to send data to any website? Like even if you as the legit user explicitly asked it to do that?
minus-squarefmstrat@lemmy.nowsci.comlinkfedilinkEnglisharrow-up5·edit-23 hours agoHaven’t read details, but the classic way is to have a system visit: site.com/badimage.gif?data=abcd Note: That s is also how things like email open rates are tracked, and how marketers grab info using JavaScript to craft image URLs.
minus-squarejaybone@lemmy.worldlinkfedilinkEnglisharrow-up2·2 hours agoThis is why every single email client for the past 2+ decades blocks external images? This didn’t occur to the AI geniuses?
minus-squareEager Eagle@lemmy.worldlinkfedilinkEnglisharrow-up3·2 hours agoIME they usually proxy and/or prefetch images for caching instead of blocking them. Only spam content is blocked by default.
minus-squarefmstrat@lemmy.nowsci.comlinkfedilinkEnglisharrow-up2·1 hour agoThis wouldn’t help, would it? How would you prefetch and cache: site.com/base64u-to-niceware-word-array/image.gif ? It would look like a normal image URL in any article, but actually represent data. Note: “niceware” is a way to convert binary or text data into a set of words like “cow-heart-running-something-etc”.
How is the application able to send data to any website? Like even if you as the legit user explicitly asked it to do that?
Haven’t read details, but the classic way is to have a system visit: site.com/badimage.gif?data=abcd
Note: That s is also how things like email open rates are tracked, and how marketers grab info using JavaScript to craft image URLs.
This is why every single email client for the past 2+ decades blocks external images? This didn’t occur to the AI geniuses?
IME they usually proxy and/or prefetch images for caching instead of blocking them. Only spam content is blocked by default.
This wouldn’t help, would it? How would you prefetch and cache:
site.com/base64u-to-niceware-word-array/image.gif
? It would look like a normal image URL in any article, but actually represent data.
Note: “niceware” is a way to convert binary or text data into a set of words like “cow-heart-running-something-etc”.