4 ms·
I don't understand the exfiltration part here. Wasn't only the user's own conversation that got copied elsewhere? That could have done in many different ways. I
by upupupandaway 3y ago
I don't understand the exfiltration part here. Wasn't only the user's own conversation that got copied elsewhere? That could have done in many different ways. I think I'm missing the point here.
- simonw 3y agoThat's the exfiltration. The user had been using Bard. They accept an invite to a new Google Doc with hidden instructions, at which point their previous conversation with Bard is exfiltrated via a loaded image link. They did not intend for their previous conversation to be visible to an attacker. That's a security hole. Maybe that conversation was entirely benign, or maybe they'd been previously asking for advice about a personal issue - healthcare or finance or relationship advice or something.
- upupupandaway 3y agoI was not familiar with the possibility of accepting an invite for a new Google Doc inside Bard. This explains it. Great!
- wunderwuzzi23 3y agoIt's actually slightly worse, because it is forced sharing! The recipient doesn't have to accept an invite -someone can just share a google doc with you and it will be visible in your drive. It's like sending someone an email (which is another attack vector this could have been triggered)