News for hackers. Stuff that matters.

A comment on Comet AI browser can get prompt injected from any site, drain your bank account. Parent comment

Re:Comet AI browser can get prompt injected from any site, d... by ivape on Sunday August 24, 2025 @02:16PM (#45006384)
A smart performant local model will be the equivalent of having good anti-virus and firewall software. It will be the only thing between you and wrong prompts being sent every which way from which app.

We’re probably three or four years away from the hardware necessary for this (NPUs in every computer).

[ Parent | on HN ]
Re:Comet AI browser can get prompt injected from any site, d... by ec109685 on Sunday August 24, 2025 @02:39PM (#45006570)
A local LLM wouldn’t have helped at all here.
[ Parent | on HN ]
Re:Comet AI browser can get prompt injected from any site, d... by ivape on Sunday August 24, 2025 @02:40PM (#45006576)
You can’t imagine a MITM LLM that sits between you and the world?
[ Parent | on HN ]
Re:Comet AI browser can get prompt injected from any site, d... by QuadmasterXLII on Sunday August 24, 2025 @03:42PM (#45007079)
Local llms can get offline searched for vulnerabilities using gradient based attacks. they will always be very easy to prompt inject.
[ Parent | on HN ]
Re:Comet AI browser can get prompt injected from any site, d... by solid_fuel on Sunday August 24, 2025 @05:14PM (#45007850)
I can't imagine how such a thing would _help_, it seems like it would just be another injection target.
[ Parent | on HN ]