3 ms·
There's an important step missing in this summary: Slack AI adds the user's private data to the malicious link, because the injected link doesn't contain that.
by Groxx 2y ago
There's an important step missing in this summary: Slack AI adds the user's private data to the malicious link, because the injected link doesn't contain that.
That it also cites it as "this came from your slack messages" is just a cherry on top.
- _the_inflator 2y agoIt's maybe not that related, but giving an LLM access to private data is not the best idea, to put it mildly. Hacking a database is one thing; exploiting an LLM is something else.