News for hackers. Stuff that matters.

A comment on Hacking Google Bard – From Prompt Injection to Data Exfiltration. Parent comment

Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by grepfru_it on Monday November 13, 2023 @06:54PM (#38256989)
I was able to browse google and youtube source code in the very very early days. Was only patched when I called up a friend and let him know. And I tried to submit the flaw through normal channels of a supportless technology company but you can guess how well that went...
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by tjpnz on Monday November 13, 2023 @07:49PM (#38257403)
Well that's pure carelessness, isn't it. I'm guessing it was deployed on a server with volume mounts it shouldn't have while possibly running as root?
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by __float on Monday November 13, 2023 @08:01PM (#38257506)
That seems like a rather specific guess -- plenty of things can go wrong beside that problem.

I found the comment more reflective of lacking any reporting process, even for "major" vulnerabilities. These days, companies have turned bug bounties into a marketing and recruiting tool, so it's a very different story.

[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by jazarwil on Monday November 13, 2023 @10:00PM (#38258483)
What exactly do you think you saw? Bard is not trained on any data of that nature, unless it is already publicly available.
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by hospitalJail on Tuesday November 14, 2023 @07:08AM (#38262294)
Scary how easy people believe the LLMs. I make the same mistakes...
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by kalleboo on Tuesday November 14, 2023 @07:59AM (#38262764)
Yeah it sounds like that curl "bug report" https://news.ycombinator.com/item?id=37904047
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by sunnybeetroot on Tuesday November 14, 2023 @01:39PM (#38267541)
How do you know it wasn’t a hallucination?
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by FirmwareBurner on Tuesday November 14, 2023 @02:47PM (#38268581)
Bard said "trust me bro".
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by grepfru_it on Thursday November 23, 2023 @07:10PM (#38399306)
Confirmed with people at google
[ Parent | on HN ]