Google Gemini routes personal Drive files and emails to human annotators

Re:Google Gemini routes personal Drive files and emails to h... by Gigachad on Monday November 09, 2026 @07:44PM (#50434593)

Which was enough exposure to get a shell on your server via the recent php exploit. If you run a public facing nextcloud server you need to be ready to update at least within an hour of patches releasing.

[ Parent | on HN ]

Re:Google Gemini routes personal Drive files and emails to h... by kevg123 on Monday November 09, 2026 @08:03PM (#50434721)

NextCloud AIO runs in Docker containers. Is there a known exploit for PHP2Shell from within Docker?

[ Parent | on HN ]

Re:Google Gemini routes personal Drive files and emails to h... by kevg123 on Monday November 09, 2026 @08:12PM (#50434792)

NextCloud AIO runs in Docker containers, so it'd be a jump to break out of that, but, yes, they could exfiltrate your data.

I guess it's choose your poison. What are?

P(companies&governments spying on you)

P(hacker stealing your files)

The impacts of the latter are probably more dangerous but unless you're a juicy target, I'd imagine most hackers are going to go for rich grandmas (sadly). So my gut feelings are ~0.95 and ~0.01, respectively.

[ Parent | on HN ]

Re:Google Gemini routes personal Drive files and emails to h... by Gigachad on Monday November 09, 2026 @11:25PM (#50436051)

For me I don't share that many files with others and the ones I do share are usually less confidential than the rest. So I run Nextcloud behind tailscale and put just the share files on google drive.

I might eventually look in to an automatic updates setup for nextcloud to keep up on patches faster than I could do it manually.

[ Parent | on HN ]