e9a8a0b3aded

Are you saying that Notion desktop has access to microphone audio or it is only able to determine if the microphone is in use?

The former is actually concerning to me. I can't imagine caring if it only knows my microphone is in use.

I wouldn't wrap it with any additional prompting. I believe that this is a "fail fast" situation, and adding prompting around it only encourages bad practices.

Giving an LLM access to a tool that has privileged access to some system is no different than providing a user access to a REST API that has privileged access to a system.

This is a lesson that should already be deeply ingrained. Just because it isn't a web frontend + backend API doesn't absolve the dev of their auth responsibilities.

It isn't a prompt injection problem; it is a security boundary problem. The fine-grained token level permissions should be sufficient.

oi_oi_oi_got_a_licence_chum.jpg