News for hackers. Stuff that matters.

A comment on Comet AI browser can get prompt injected from any site, drain your bank account. Parent comment

Re:Comet AI browser can get prompt injected from any site, d... by ec109685 on Sunday August 24, 2025 @02:32PM (#45006510)
It still keeps you in the loop, but doesn’t ask to run shell commands, etc.
[ Parent | on HN ]
Re:Comet AI browser can get prompt injected from any site, d... by jameshart on Tuesday August 26, 2025 @07:09PM (#45033452)
That seems like a bad default. VSCode’s agent mode requires approval for shell commands every time by default, with a whitelisting capability (which is itself risky, because hiding shell commands in args to an executable is quite doable). Are people running agents under their own user identity without supervising the commands they run?
[ Parent | on HN ]
Re:Comet AI browser can get prompt injected from any site, d... by cma on Wednesday August 27, 2025 @10:13AM (#45040033)
The default is ask for approval with option to whitelist certain commands.
[ Parent | on HN ]