News for hackers. Stuff that matters.

A comment on Hacking Google Bard – From Prompt Injection to Data Exfiltration. Parent comment

Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by tjpnz on Monday November 13, 2023 @07:49PM (#38257403)
Well that's pure carelessness, isn't it. I'm guessing it was deployed on a server with volume mounts it shouldn't have while possibly running as root?
[ Parent | on HN ]
Re:Hacking Google Bard – From Prompt Injection to Data Exfil... by __float on Monday November 13, 2023 @08:01PM (#38257506)
That seems like a rather specific guess -- plenty of things can go wrong beside that problem.

I found the comment more reflective of lacking any reporting process, even for "major" vulnerabilities. These days, companies have turned bug bounties into a marketing and recruiting tool, so it's a very different story.

[ Parent | on HN ]