15 ms·
If you let a malicious user into your Slack instance, they don't need to do any fancy AI prompt injection. They can simply change their name and profile picture
by paxys 2y ago
If you let a malicious user into your Slack instance, they don't need to do any fancy AI prompt injection. They can simply change their name and profile picture to impersonate the CEO/CTO and message every engineer "I urgently need to access AWS and can't find the right credentials. Could you send me the key?" I can guarantee that at least one of them will bite.
- cj 2y agoValid point, unless you consider that there are a lot of slack workspaces for open source projects and networking / peer groups where it isn't a company account. In which case you don't trust them with private credentials by default. Although non-enterprise workspaces probably also aren't paying $20/mo per person for the AI add on.
- paxys 2y agoNone of them should be using Slack to begin with. It is an enterprise product, meant for companies with an HR department and employment contracts. Slack customer support will themselves tell you that the product isn't meant for open groups (as evidenced by the lack of any moderation tools).