News for hackers. Stuff that matters.

A comment on GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos. Parent comment

Re:GitLost: We Tricked GitHub's AI Agent into Leaking Privat... by darkvertex on Wednesday July 08, 2026 @11:39AM (#48833406)
Exactly. The system should run in a forcibly limited scope of the current repo only or add permissions for scope to include other org/user repos.

It can't leak a private repo if it can't open it to begin with.

[ Parent | on HN ]

There are no comments on this comment yet.