Re:Data exfiltration from Writer.com with indirect prompt in...
by gcr on Friday December 15, 2023 @11:09AM
(#38655512)
It's more than that.
If I can convince your Writer.com chatbot to rely on one of my documents as a source, then I can exfiltrate any other secret documents that you've uploaded in the Writer.com database.
More concretely, the attack is that an attacker can hijack the Writer.com LLM into divulging whatever details it knows and sending it to a remote server.
If I can convince your Writer.com chatbot to rely on one of my documents as a source, then I can exfiltrate any other secret documents that you've uploaded in the Writer.com database.
More concretely, the attack is that an attacker can hijack the Writer.com LLM into divulging whatever details it knows and sending it to a remote server.