3 ms·
I was an early Bard user. Bard allowed me to browse internal google code repositories. I was able to view all of the YouTube code. With the recently announced b
by grepfru_it 3y ago
I was an early Bard user. Bard allowed me to browse internal google code repositories. I was able to view all of the YouTube code. With the recently announced battle against inviticus, it is very relevant.
There is a reason private repos are private
Bonus: the code was pretty tough to understand alone, but with public api documentation it gave a lot of insight to how google works. Sure I wasn’t going to find a buffer overflow or a way into their network at quick glance, but enough time and I can siphon ideas, data, or full chunks of code to do what I want with.
I reported the vulnerability through a colleague and they have since patched it.
- ipsum2 3y agoThat sounds highly implausible. Bard would not be trained on internal Google code, nor would have access to it. Most likely it was hallucinating, based off of public APIs its seen. Did you ever get confirmation that that code actually existed?
- grepfru_it 3y agoRemember when it was implausible for a website to drop all of its database tables based on the name you input into a form? Get your popcorn ready, all the silly vulnerabilities of the 90s are coming back again
- ShamelessC 3y agoBullshit.