Data exfiltration from Writer.com with indirect prompt injection

Re:Data exfiltration from Writer.com with indirect prompt in... by simonw on Friday December 15, 2023 @11:19AM (#38655610)

"We do not consider this to be a security issue since the real customer accounts do not have access to any website."

That's a shockingly poor response from Writer.com - clearly shows that they don't understand the vulnerability, despite having it clearly explained to them (including additional video demos).

[ Parent | on HN ]

Re:Data exfiltration from Writer.com with indirect prompt in... by ryandrake on Friday December 15, 2023 @12:19PM (#38656231)

Makes you wonder whether they even handed it to their security team, or if this was just a response written by a PR intern whose job is projecting perpetual optimism.

[ Parent | on HN ]

Re:Data exfiltration from Writer.com with indirect prompt in... by nvr219 on Friday December 15, 2023 @07:47PM (#38660692)

They probably used their own app to generate the response.

[ Parent | on HN ]

Re:Data exfiltration from Writer.com with indirect prompt in... by behnamoh on Friday December 15, 2023 @11:33PM (#38661748)

And while they were using their own app they got hacked!

[ Parent | on HN ]